Overview

Workday is an enterprise platform for managing human capital, finance, and business operations across your organization. Persona’s Workday integration enables organizations to securely retrieve and sync worker information from Workday Human Capital Management (HCM) into Persona. Use Workday as your system of record to prefill identity data, automate verification for employees and contractors, and keep investigations and access decisions moving without manual copy-paste.

Benefits

Automated Enrichment: Pull trusted worker details (e.g., name, email, job info) from Workday to automatically populate Persona workflows and cases.

Real-Time Context: Surface Workday attributes directly in Persona so reviewers and operations teams have the full picture when making decisions.

Reduced Manual Work: Eliminate repetitive lookups and data entry across HRIS and risk tools, shortening investigation and onboarding time.

Improved Consistency: Use Workday as your single source of truth to standardize identity data across systems and teams.

Integration Features

Persona’s Workday integration supports secure retrieval and mapping of worker data into Persona so teams can automate onboarding, re-verification, and access reviews.

Setting up the Workday integration

Prerequisites

To set up the Workday integration, ensure you have:

• Admin access to your Workday account
• OAuth 2.0 credentials for secure authentication (Client ID and Secret)
• Server URL, Authorization URL, and Token URL from the Workday API client configuration page
• (Optional) an Integration System User (ISU) with necessary API permissions. See the FAQ section for more information on what ISUs are and how to set them up.

Setting up the Workday Credentials

1. In your Workday dashboard, search “Register API Client” to create a new client, or “Edit API Client” to modify an existing one.

   

2. Click “Register an API Client”. Input the Client Name of your choosing.

3. For the Client Grant Type, select Authorization Code Grant.

4. (Optional) Select the Integration System User (ISU) you’d like to associate with this credential. See the FAQ section for how to set up an ISU.

5. For the redirection URL, input https://app.withpersona.com/integrations/oauth-callback.

6. For the Scope (Functional Areas), select Staffing and Integration.

7. Click OK to register the API client.

   

Connecting to the Persona dashboard

1. In the Persona Dashboard, go to Integrations > Marketplace and select Workday.
2. Click Add Credential at the top of the page.
3. Enter the Server URL, which is listed as the “Workday REST API Endpoint” at bottom of the Workday API client configuration page.
4. Enter the Authorization URL, which is listed as “Authorization Endpoint” in Workday.
5. Enter the Token URL, which is listed as “Token Endpoint” in Workday.
6. Enter a nickname for the credential, as well as your client ID and secret.
7. Click continue, and sign in to your Workday tenant with an account that has the required permissions and approve the requested access.
   • If you do not associate your Workday API client with an ISU, you will need to sign in to a Workday account that either created or has access to the API client when setting up your connection between Persona and Workday. If you do associate your Workday API client with an ISU, then you should log in with the ISU’s username and password when setting up the connection.
8. Save your credential. You can remove the credential at any time.

Using the Workday integration in a workflow

1. Create a new workflow, or open an existing workflow you’d like to update.
2. Add a new Action step > Integrations.
3. Select the Workday integration and choose your Workday credentials.
4. Choose the action you want to perform (e.g., Retrieve Worker), then configure the input fields and field mappings.
5. Save and publish the workflow. Run a test to confirm data is retrieved and mapped as expected.

Workday Operations Overview

In addition to syncing field values, Persona can retrieve worker records and associated profile details using Workday’s API. See below for the available Workflow Action step and possible configurations for the Workday integration:

Retrieve Worker Workflow Action Step

Fetch a specific worker’s profile from Workday and bring key attributes into Persona. This is commonly used to prefill verification flows, enrich a Case or Account, or validate data consistency across systems.

Configuration Steps:

• Provide values for required fields:
  • Worker Identifier: Provide the unique identifier used in your tenant to reference the worker (for example, employee or worker ID).
• Optionally add:
  • Which categories to retrieve, such as:
    • Personal details (name, date of birth)
    • Contact details (email)
    • Employment details (job title, hire date, employee type)
    • Organization context (manager, location, cost center, supervisory org)
    • Status (active, terminated)

Tip: The exact data returned depends on your Workday configuration and permissions. Work with your Workday admin to confirm which attributes are accessible.

FAQs

What permissions are required in Workday?

You need admin-level access with permissions to read worker records and, if applicable, update any custom fields you intend to write back to.

Do I need an Integration System User (ISU) to set up the Workday and Persona integration?

No. Authentication for Persona’s Workday integration is all conducted via OAuth. An ISU is not required in order for the Workday integration to function.

A Workday Integration System User (ISU) is basically a special Workday account created just for integrations (not a human employee). It can be thought of as a “robot user” that Workday uses to connect with other systems, and it has its own login and set of permissions. In Workday, you need to assign roles to an ISU just as you would a real user, which controls the data the ISU can see or change.

Whether you opt for associating an ISU with your Workday connection depends on your organization’s needs and security practices.

How do I troubleshoot integration issues?

• Confirm the account connected to Persona has the necessary permissions in Workday.
• Verify the worker identifier provided in the workflow matches your Workday configuration.
• Review integration logs in Persona (Integrations > Integration Logs) to see request/response details and error messages.

Where can I learn more about Workday Functional Areas?

For more information on Functional Areas and what domains they cover, search “Functional Areas” in the search bar of your Workday dashboard.

Plans Explained