Skip to main content

​
About Workday

Connecting Workday lets Iru Identity pull worker records from a Workday report and keep your directory in sync. When someone is hired, changes departments, or leaves, those updates flow into Iru on their own. Everything Iru imports comes from the columns in that report.
For the Workday-specific steps only. For concepts shared across all sync connections (the unique identifier, required fields, IQL, and what happens on each sync), see Directory Sync.

​
Connect Workday to Iru Identity

Enter Integration System User credentials in Iru, then point Iru at your report and map your fields. Iru submits these credentials directly; there is no separate Workday consent window.
1

Navigate to Directory

Navigate to Directory in the left-hand navigation bar (under Identity). Select the Sync tab.
2

Select Connect Source

Select Connect Source in the upper-right.
3

Select Workday

Select the Workday tile.
4

Enter Display name and Description

On the Configure Workday screen, enter a Display name and an optional Description. Display name is optional and is shown in the directory sync list. Description is optional notes for administrators.
5

Enter Instance host

Enter Instance host. Use the full host in your Workday URL, for example acme.myworkday.com. Sandbox and implementation tenants use different domains, so paste the whole host.
6

Enter Tenant

Enter Tenant. This is your Workday tenant name.
7

Enter Report owner

Enter Report owner. This is the Workday account the custom report belongs to. It is part of the report’s address, not the account Iru signs in as.
8

Enter Report name

Enter Report name. This is the custom report’s name as published in Workday. Everything Iru imports comes from the columns in that report, so make sure it includes every field you care about, such as email, name, department, manager, and employee ID.
9

Select Next

Select Next.
The Configure Workday screen with Display name, Description, Instance host, Tenant, Report owner, Report name, and Next.
10

Enter Integration user and Password

On the Connect with Workday screen, enter Integration user and Password. Integration user is the Workday account Iru authenticates as, typically an Integration System User with access to the report. This is not the report owner. Password is that integration user’s password. Iru stores it encrypted and does not show it again.
The Connect with Workday screen with Integration user and Password.
Use a dedicated Integration System User rather than a personal login, so the connection keeps working as users come and go.
After you select Save, the connection has Configuration, Mapping, Effective Users, and Sync tabs.

​
Map Your Data to Iru

Iru reads your report’s columns and lays them out to match to Iru attributes.
1

Navigate to Directory

Navigate to Directory in the left-hand navigation bar (under Identity). Select the Sync tab.
2

Select the Workday source

Select your Workday source.
3

Select the Mapping tab

Select the Mapping tab.
4

Set a unique identifier

Choose the column that uniquely identifies each user, usually an employee ID. Once you save the connection, it can’t be changed.
5

Map the required attributes

Map email, first name, last name, and username. Everything else is optional.
6

Transform with IQL when needed

Pick a column, or write a short IQL expression to build a value. Iru suggests your report’s column names and checks the expression as you type.Examples (illustrative; use your report’s own column names):
  • Build a username from an email: email_work.split("@")[0]
  • Combine two columns: first_name + " " + last_name
  • Prefer one column, fall back to another: optional.ofNonZeroValue(email_work).orValue(email_home)
See Map your data for more on mapping, including the safe pattern for sometimes-blank fields.

​
Finish and Turn It On

1

Save your mappings

Select Save. You’ll land on the connection’s detail page.
2

Enable the connection

Review everything, then select the ellipsis in the upper-right and select Enable. A connection starts disabled, so enabling it kicks off the first import and keeps Iru in sync.
To change or review the connection later, navigate to Directory in the left-hand navigation bar (under Identity), select the Sync tab, then select your Workday source. Select the Configuration tab to set how often Iru syncs or edit the report, the Mapping tab to edit mappings, the Effective Users tab to review who is in sync, or the Sync tab to run Sync now and review activity. If the credentials expire or change, re-authenticate from the Configuration tab.

​
Re-authenticate

When the authorization expires or is revoked, the connection shows Needs re-authentication. Use Re-authenticate from Connection details, then enter the current Integration user and password. Your mappings are not affected.
The Re-authenticate Workday dialog with Integration user and Password fields.
1

Navigate to Directory

Navigate to Directory in the left-hand navigation bar (under Identity). Select the Sync tab.
2

Select the Workday source

Select your Workday source.
3

Select the Configuration tab

Select the Configuration tab, then select Re-authenticate.
4

Enter integration credentials

Enter the Integration user and Password, then select Save. Iru submits these credentials directly; there is no separate Workday consent window.

Directory Sync

The shared concepts behind every Directory Sync provider.

Connect BambooHR

The other supported HR system. No report to configure.