Workday Connector

Overview

Used for OneTrust Data Discovery, the Workday Connector helps scan and return data samples from cloud-based systems containing human resources and financial management services information.

Note:

This connector is currently under Public Preview. Contact OneTrust Support to request early access.

Pod Residency

rdbms-scanner

Connection Method

JDBC URL

Supported Scan Actions

Scan Type

Description

Catalog

This will collect the metadata for Workday services and its resources.

Catalog & Scan

We collect metadata for services and its resource and go for data extraction after that. It will return personally identifiable information (PII), data elements (DE), and terms as per the classification label identified.

Credentials and System Permissions

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

  1. Basic authentication for username and password is required at minimum. The connection parameters must be included in the credential JSON.

  2. Configure the following connection parameters:

    • ConnectionType: SOAP

    • AuthSchem: Basic

    • User: Workday user account name

    • Password: password used to authenticate user

    • Tenant: tenant for the account

    • BaseURL: the base URL for the REST API endpoint in the View API Clients page

    JSON
    { 
        "connectionUrl": "jdbc:workday:User=<username>;Password=<password>;Host=<host>.workday.com;Tenant=<tenantname>" 
    }
  3. The JDBC URL should be formatted as follows:

    JSON
    { 
        "connectionUrl": "jdbc:workday:ConnectionType=SOAP;AuthScheme=Basic;Tenant=<Tenant>;RTK=<RTK>;BaseURL=<DOMAIN>.myworkday.com;User=<User@Tenant>;Password=<Password>;", 
        "driver_class_name": "cdata.jdbc.workday.WorkdayDriver" 
    }
  4. You can use either of the following formats for the JDBC URL:

    • jdbc:workday:ConnectionType=SOAP;User=myuser;Password=mypassword;Tenant=mycompany;BaseURL=https://wd3-impl-services1.workday.com

    • jdbc:cdata:workday:ConnectionType=SOAP;User=myuser;Password=mypassword;Tenant=mycompany;BaseURL=https://wd3-impl-services1.workday.com

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Object Limits

  • Maximum number of services

  • Maximum number of resources per service

  • Maximum number of rows per service

Include/Exclude Paths

Objects

Description

Service

Input Workday service name.

Supports wildcard [*]

CODE
Example: staff or Account

staff* 
*
*fing

Resource

Input Workday resource name. OneTrust supports scanning services that are supported in the API appendix below. Resource names match those found in the link above.

Supports wildcard [*]

CODE
Example: jobs

job*
*
*obs