Workday Custom Reports

This article covers the following topics:

1 Create a custom report in Workday
- 1.1 Add last termination date (optional)
- 1.2 Add manager_email (optional)
2 Register the API client
3 Set up Workday Custom Reports application integration

Create a custom report in Workday

Log in to Workday, create a custom report, and add a report name.
Select Advanced from the Report Type dropdown, select Enable as Web Service, and select All Active and Terminated Workers from the Data Source dropdown.
Edit the columns for the custom report. The field column in below table represents the field from the Worker object in Workday. Add all required fields in the table to the custom report.

Any optional fields can be omitted. Fields such as Manager_Email and Bustiness Title must be synced to Zilla for downstream use cases.

Field	Column Heading Override	Required/Optional

Field	Column Heading Override	Required/Optional
Email_-_Work	Email_-_Work	Required
Employee_ID	Employee_ID	Required
Active_Status	Active_Status	Required
Preferred_Name_-_First_Name	Preferred_Name_-_First_Name	Required
Preferred_Name_-_Last_Name	Preferred_Name_-_Last_Name	Required
Worker	Worker	Optional
Hire_Date	Hire_Date	Optional
Last Termination Date	lastTerminationDate	Optional
Manager	Manager	Optional
Manager_Email	Manager_Email	Optional
Business Title	businessTitle	Optional
Worker_Type_-_Text	Worker_Type_-_Text	Optional
Cost_Center	Cost_Center	Optional
Cost_Center_Hierarchy	Cost_Center_Hierarchy	Optional

Add last termination date (optional)

This field is optional. If provided, it is used to generate the security findings for terminated users that have logged in after their termination date.

If this calculated field does not exist, create it in the Workday Custom Report. Workday utilizes the ISO 8601 date format (YYYY-MM-DD) for exporting data in custom reports.

Add manager_email (optional)

This field is optional. If provided, it is used to show the manager for the worker. If this calculated field does not exist, create it in the Workday Custom Report.

Register the API client

Go to View Custom Report and select the report from custom report drop down.
Click the ellipses next to the custom report name, select Web Services, and click View URLs.
Click JSON. A new tab opens containing the API response for your custom report.
Copy the URL to use for the API endpoint containing the custom report's data and save it to use when configuring the application in Zilla.
Go to Register API Client task and add a Client Name.
Select Authorization Code Grant as the client grant type and select Bearer as the access token type.
Type https://app.zillasecurity.com/api/auth/callback/workday_custom_reports as the redirection URI, and select Staffing, System and Tenant Non-Configurable as the scope (functional areas) for the API client. The redirection URI may differ depending on geographic location.
Click OK. Save the Client ID, Token Endpoint URL, and Authorization Endpoint URL to use when configuring the application in Zilla.
Go to Generate New API Client Secret task, select API Client, and click OK.
Check Confirm and click OK.
Save the Client Secret to use when configuring the application in Zilla.

Set up Workday Custom Reports application integration

Log in to Zilla with admin credentials and click Add Application.

Search for Workday (Custom Reports) and click Add to Applications.

Add a business owner and technical owner and indicate whether the app is mission-critical to your organization. Click Add to Applications.

Click Sync now.

Enable API Integration and add the URL for the JSON formatted custom report in the Custom Reports URL field. We highly recommend using OAuth2.0 authentication, but the integration does support basic auth.

Configure the Client ID, Client Secret, Authorization URL, and Token URL with the saved values from Workday.
To use basic authentication, configure Username and Password fields only.
Click Next to start the sync.