How to Authenticate

explore the process of connecting workday hris to bindbee this guide will walk through the steps, from accessing the magic link to creating a new security group and managing authorization policies create isu step 1 click on the magic link to allow and continue step 2 navigate to workday step 3 search for creator integration and select the create integration system user step 4 assign a username, for instance, bindbee hris step 5 set a password step 6 leave all other parameters unchanged and click on okay step 7 press done to ensure the password does not reset step 1 navigate to maintain password rules step 2 inside the system, select users exempt from password expiration step 3 enter the newly created user and press okay step 4 press done to create a new security group step 1 navigate to create security group step 2 from the type of connected security group, select the integration system security group unconstrained step 3 assign a name to the group step 4 press okay step 5 inside the security group, add the newly created user step 6 press okay and done to manage authorization policies step 1 navigate to manage authorization policies step 2 go to the current policy and press edit step 3 create a new rule named bindbee hris step 4 add the newly created security group step 5 set the authentication condition name to credentials and leave the rest unchanged step 6 press okay and done step 7 activate all authentication policies step 8 add a comment and press okay step 9 confirm the selection to maintain the security group step 1 navigate to maintain security group step 2 select the newly created group step 3 add the desired permissions for read only access, select get only for read and write access, select get input step 4 select all required permissions api operation domain security policy get only worker data public worker reports this is the minimum required permission get only person data name get only person data personal data get only person data home contact information get only person data work contact information get only personal data id information this is required to pull national identifiers of employees get only worker data compensation get only worker data workers get only worker data all positions get only worker data current staffing information this is required to pull employment status of employees get only worker data employment data get only worker data all worker’s positions past and present this is required to pull historical employments get only worker data organization information get only reports pay calculation results for worker (results) get only worker data payroll get only worker data time off get only set up benefits get only process export time blocks get only worker data time off (accrual and time off adjustments/overrides by batch id) get only worker data benefit elections get only worker data beneficiaries and dependents get only worker data compensation by organization get only manage organization integration this is required to pull the organization hierarchy step 5 \[optional] for employee write, add the following permissions too api operation domain security policy get only job requisition data get and put pre hire personal data get and put person data personal information get only manage location step 6 press okay and done if you're interested in knowing more about how workday domains break down into subdomains, see the table below main domain subdomain job requisition data person data personal data person data citizenship status person data disabilities person data id information person data national id identification person data marital status person data date of birth person data gender person data government ids person data personal information person data photo person data home contact information person data home address person data home email person data home instant messenger person data home phone person data home web address person data work contact information person data work address person data work email person data work instant messenger person data work phone person data work web address person data public work email address worker data workers worker data compensation all worker’s positions past and present worker data all positions worker data current staffing information worker data public worker reports worker data employment data reports pay calculation results for work (results) worker data payroll process export time blocks worker data organization information worker data benefit elections worker data beneficiaries and dependents worker data time off worker data time off (time off) worker data time off (accrual and time off adjustments/overrides by batch id) time off permission worker data time off (time off balances) worker data time off (time off balances manager view) worker data time off (time off manager view) step 7 \[optional] for employee write, you also need to search for edit bisiness process security policy and enter the business process type as hire , and add the newly created security group in the section where the initiating action is hire employee (web service) press ok & done to activate all changes step 1 navigate to activate security group step 2 add a comment step 3 confirm the selection and press okay enter the user id and password created earlier next, enter the url to find the correct url in workday step 1 go to public web services step 2 navigate to benefit administration → web services → view wsdl step 3 scroll to the bottom of the page step 4 copy everything before /service this value is your web services endpoint url paste it into the url field in the magic link to enter the tenant name step 1 open your workday dashboard step 2 look at the dashboard url step 3 copy the part that appears after workday com/ step 4 paste this value into the tenant name field 🎉 congratulations! you’ve successfully connected to workday to bindbee