Skip to main content
McAfee MVISION Cloud

Configure MVISION Cloud for Workday

For information about MVISION Cloud for Workday, see About MVISION Cloud for Workday.

For specific and up-to-date instructions on how to perform any tasks listed below, go to the Workday site and search the online Help. The Workday online Help site is located here: https://www.workday.com/en-us/signin.html

IMPORTANT: Steps can vary depending on the Workday release, and are intended to be high-level guidance, not literal steps.  

Create an Integration System User Account

Before you begin, make sure to get the Workday Integration System User credentials with permissions to the System Auditing Domain.

To create an Integration System User account with the permissions:  

  1. Log in as a Workday Admin. Search for the Create Integration System User task in Workday, and open it.
  2. Enter the chosen User Name and Password. Leave other fields with default values.
  3. Uncheck the Do Not Allow UI Sessions checkbox. If you check this option, you are not allowed to enable API for the first time. You can enable checkbox after enabling API. Click OK.
    clipboard_e65af157d853871e995ae644447f1c3c9.png
  4. Search for the Maintain Password Rules task and open it. Add the integration system user to the System Users exempt from the password expiration field.  
  5. In Edit Integration System User task page, select the previously created Integration System User in the Integration System User field. Click OK
  6. Search for the View Domain task in Workday and open it.  Search for and select the System Auditing domain and click OK.
  7. From Actions, choose Domain > Edit Security Policies.
  8. Add the previously created Security Group to the Report/Task permissions and check the View permissions.  Also, add the Security Group to Integration Permissions and check the Get permissions.  
  9. Search for the Activate Pending Security Policy Changes task in Workday and open it.  Confirm and activate the changes you made.

Register an API Client

The following allows you to get the API Client details.  The steps you perform in Workday might vary, depending on the release.

To register an API Client:

  1. Search for the Register API client task in Workday and open it. Enter the Client Name of choice, and select:
  2. Click OK.
  3. On the next page, click Done.
  4. Note and save the values for the following items:
    • Client ID
    • Client Secret
    • Workday REST API Endpoint
    • Token Endpoint
    • Authorization Endpoint
  5. Click Done.  

Enable Workday in MVISION Cloud via API 

  1. Go to Settings > Service Management.
  2. Click Add Service Instance.
  3. Select Workday
    workday1.png
  4. Instance Name. Give your Workday instance a unique name. 
  5. To begin the configuration, click Enable.
    workday2.png
  6. Click Provide API Credentials
    workday3.png
  7. Enter the following details:  
    • Workday Authorization Endpoint  (Note: If the Workday account is enabled with SAML SSO, then please append query string parameter 'redirect=n' to the authorization endpoint.
      • If the authorization endpoint already has other query string parameters, then append '&redirect=n' to the end of authorization endpoint
      • If the authorization endpoint doesn't have any query string parameters, then append '?redirect=n' to the end of authorization endpoint)
  • Workday Token Endpoint
  • Workday REST API Endpoint
  • Workday Client ID
  • Workday Client Secret
  1. Click Submit
  2. When prompted, log in to Workday with the Integration System User credentials.  
  3. Click Allow.  
  4. Click Done
     
  • Was this article helpful?