Set the Adaptive Planning Authorization Endpoint URL for Workday for Google Sheets
- Install Workday for Google Sheets. See Install Workday for Google Sheets.
- Enable your Adaptive Planning instance for Workday single sign-on.
- Confirm that a Workday administrator enabled Google Sheets (Google Workspace) inTenant Setupand has theClient ID,API Endpoint URL, andAuthorization Endpoint URLvalues.
- Identify the Adaptive Planning API host for the cluster that you want to authenticate against. See Reference: Adaptive Planning Authentication URLs and IP Addresses.
When you add an Adaptive Planning via Workday tenant, Workday for Google Sheets authenticates against the Adaptive Planning central authentication service. When you leave the
Adaptive Planning Authentication URL
field blank, the add-on uses https://api.adaptiveplanning.com.Set an override only when your organization must authenticate against a different Adaptive Planning API host, usually to meet data residency requirements or to use a non-US authentication cluster. Avoid setting this field unless that need arises, even when you sign in to another cluster or region for other tasks.
Enter the host only, with no path and no trailing slash:
Region or Cluster | Adaptive Planning Authorization Endpoint URL |
|---|---|
US authentication (production) | Leave blank, or enter https://api.adaptiveplanning.com |
Singapore |
You set the host in 2 places: the Google Sheets API client in Workday, and the tenant settings in Workday for Google Sheets.
The override host must match the
Redirect URI
and Allowed Origin
hosts on the Google Sheets API client in Workday. When the hosts don't match, users can't sign in.- Update the Google Sheets API client in Workday:
- Access the Tenant Setup task for Adaptive Planning or Financials, depending on your data source.
- On theGoogle Sheets (Google Workspace Connect)tab, open theGoogle Workspace PKCE ClientAPI client.
- In theRedirect URIfield, enter https://<your-API-host>/oauth-po1/callback.
- In theAllowed Originfield, enter https://<your-API-host>.Example: https://api.adaptiveplanning.euDon't add a trailing slash to either value. When you use the default US host, keep https://api.adaptiveplanning.com/oauth-po1/callback and https://api.adaptiveplanning.com.
- ClickOK.
- Set the override in Workday for Google Sheets:
- Open a spreadsheet in Google Sheets and selectExtensions > Workday for Google Sheets > Workday.
- SelectManage Tenants.
- Add or edit your Adaptive Planning via Workday tenant and enter values in theName,Client ID,API Endpoint URL, andAuthorization Endpoint URLfields.
- OpenAdvanced Settings.
- In theAdaptive Planning Authorization Endpoint URLfield, enter the same host that you entered on the API client, with no path.Example: https://sgapi.adaptiveplanning.comLeave the field blank to use the default US host.
- ClickSave, then selectSign In.
You can now sign in to this tenant through Workday and authenticate against the host that you specified. Report data continues to come from the Adaptive Planning instance linked to the Workday tenant.
When you can't sign in, check these conditions:
Cause | Solution |
|---|---|
The sign-in window fails or returns an error. | The override host, Redirect URI host, and Allowed Origin host are identical. |
The sign-in window returns a 404 error. | The Redirect URI value includes /oauth-po1/callback, and the Allowed Origin value includes the host only, with no path and no trailing slash. |
Sign-in fails, and you didn't intend to override the authentication host. | Clear the Adaptive Planning Authorization Endpoint URL field, and restore the default Redirect URI and Allowed Origin values on the API client. |
Sign-in fails for a tenant that you configured before September 2026. | The Redirect URI and Allowed Origin values use a https://script.google.com/a/ host. This callback destination no longer exists. Click Refresh Google Workspace on Tenant Setup, or update both values manually. |
Don't click Refresh on the Google Sheets API client unless you intend to restore the Workday default redirect and origin. Refresh clears your regional override, and you must set it again.