> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Connect Workday
> Connect Workday to Iru Identity so it reads workers from a custom report and keeps your Iru directory in sync as people are hired, transferred, or terminated.
### About Workday
Connecting **Workday** lets Iru Identity pull worker records from a Workday report
and keep your [directory](/en/identity/directory/directory-overview) in sync. When
someone is hired, changes departments, or leaves, those updates flow into Iru on
their own. Everything Iru imports comes from the columns in that report.
For the Workday-specific steps only. For concepts shared across all sync
connections (the unique identifier, required fields, IQL, and what happens on
each sync), see
[Directory Sync](/en/identity/directory/directory-sync).
### Connect Workday to Iru Identity
Enter Integration System User credentials in Iru, then point Iru at your report
and map your fields. Iru submits these credentials directly; there is no separate
Workday consent window.
Navigate to **Directory** in the left-hand navigation bar (under
**Identity**). Select the **Sync** tab.
Select **Connect Source** in the upper-right.
Select the **Workday** tile.
On the **Configure Workday** screen, enter a **Display name** and an optional
**Description**. **Display name** is optional and is shown in the directory sync
list. **Description** is optional notes for administrators.
Enter **Instance host**. Use the full host in your Workday URL, for example
`acme.myworkday.com`. Sandbox and implementation tenants use different domains,
so paste the whole host.
Enter **Tenant**. This is your Workday tenant name.
Enter **Report owner**. This is the Workday account the custom report belongs to.
It is part of the report's address, not the account Iru signs in as.
Enter **Report name**. This is the custom report's name as published in Workday.
Everything Iru imports comes from the columns in that report, so make sure it
includes every field you care about, such as email, name, department, manager,
and employee ID.
Select **Next**.
On the **Connect with Workday** screen, enter **Integration user** and
**Password**. **Integration user** is the Workday account Iru authenticates as,
typically an Integration System User with access to the report. This is not the
report owner. **Password** is that integration user's password. Iru stores it
encrypted and does not show it again.
Use a dedicated Integration System User rather than a personal login, so the
connection keeps working as users come and go.
After you select **Save**, the connection has **Configuration**, **Mapping**,
**Effective Users**, and **Sync** tabs.
### Map Your Data to Iru
Iru reads your report's columns and lays them out to match to Iru attributes.
Navigate to **Directory** in the left-hand navigation bar (under
**Identity**). Select the **Sync** tab.
Select your Workday source.
Select the **Mapping** tab.
Choose the column that uniquely identifies each user, usually an **employee
ID**. Once you save the connection, it can't be changed.
Map **email**, **first name**, **last name**, and **username**. Everything else is
optional.
Pick a column, or write a short IQL expression to build a value. Iru suggests
your report's column names and checks the expression as you type.
Examples (illustrative; use your report's own column names):
* Build a username from an email: `email_work.split("@")[0]`
* Combine two columns: `first_name + " " + last_name`
* Prefer one column, fall back to another: `optional.ofNonZeroValue(email_work).orValue(email_home)`
See [Map your data](/en/identity/directory/directory-sync#map-your-data) for more
on mapping, including the safe pattern for sometimes-blank fields.
### Finish and Turn It On
Select **Save**. You'll land on the connection's detail page.
Review everything, then select the **ellipsis** in the upper-right and select
**Enable**. A connection starts **disabled**, so enabling it kicks off the first
import and keeps Iru in sync.
To change or review the connection later, navigate to **Directory** in the
left-hand navigation bar (under **Identity**), select the **Sync** tab, then select
your Workday source. Select the **Configuration** tab to set how often Iru
syncs or edit the report, the **Mapping** tab to edit mappings, the **Effective
Users** tab to review who is in sync, or the **Sync** tab to run **Sync now** and
review activity. If the credentials expire or change,
[re-authenticate](#re-authenticate) from the **Configuration** tab.
### Re-authenticate
When the authorization expires or is revoked, the connection shows **Needs
re-authentication**. Use **Re-authenticate** from **Connection details**, then enter
the current Integration user and password. Your mappings are not affected.
Navigate to **Directory** in the left-hand navigation bar (under
**Identity**). Select the **Sync** tab.
Select your Workday source.
Select the **Configuration** tab, then select **Re-authenticate**.
Enter the **Integration user** and **Password**, then select **Save**. Iru submits
these credentials directly; there is no separate Workday consent window.
### Related Articles
The shared concepts behind every Directory Sync provider.
The other supported HR system. No report to configure.