Setup Considerations: Adaptive Planning for HCM and Financials

Adaptive Planning

You can use this topic to help make decisions when planning your configuration and use of Workday Adaptive Planning with Workday HCM and Financials. It explains:

Why to set it up.

How it fits into the rest of Workday.

Downstream impacts and cross-product interactions.

Security requirements and business process configurations.

Questions and limitations to consider before implementation.

Refer to detailed task instructions for full configuration details.

What It Is

Configure your tenants with Adaptive Planning to:

Sync data with HCM and Financials for a seamless planning experience.

Give users to access Adaptive Planning on their Workday

Home

page.

You can restrict your users to sign in only using SSO and the worklet.

If you enforce sign-in using SSO and the worklet, you can:

Sync these user profiles with joint access to both Adaptive Planning and HCM or Financials.

Use your Workday credentials to sign in to OfficeConnect and to use Adaptive Planning public APIs.

Generate Adaptive Planning alerts for synced users as Workday notifications.

Publish approved financial, headcount, or workforce plan versions and make them available to the rest of Workday outside of Adaptive Planning.

Use planning configuration managers to automatically sync your workforce planning metadata and data with Adaptive Planning.

Use Workday tasks to create and collaborate on headcount and headcount forecast plans, and execute positions directly from those plans.

You can also sync your plan dimensions and ledger accounts with:

Your HCM data.

Your Financials data.

Any source system.

Business Benefits

If you configure SSO with user sync:

You can sign in to all your applications from Workday directly.

You only need to maintain user profile information in Workday for more streamlined and centralized user management. Workday automatically updates, creates, and deletes the Adaptive Planning accounts of all synced users.

Synced users receive Adaptive Planning alerts as Workday notifications, providing a central location for all notifications for a more unified user experience.

You can plan collaboratively in Adaptive Planning and publish the plans to the rest of Workday. By publishing, you enable people downstream to act on those plans.

You can create positions in Workday using the information you gathered in your workforce planning instance.

With your plan dimensions and ledger accounts synced, you can plan using up-to-date data.

Use Cases

Once you sync your joint access users, plan dimensions, and ledger accounts, you can collaboratively plan your FTE and headcount on Personnel sheets using relevant data. You can publish an approved plan to Workday so that your hiring managers and HR business partners can react to or report off of your plan. If you publish financial plans, you can also execute budgetary control.

Questions to Consider

Questions	Considerations
Who's going to configure the tenants?	Implementers or security administrators should configure or help you configure the tenants and any additional features you want to uptake in the future. Implementers or security administrators are people or a group of people with all of these skills and permissions: Administrators with implementation experience with Workday and Workday Adaptive Planning. Users with extensive administrative and security privileges in Workday. Users who can configure authentication setup and security domains in Workday and the equivalent in Workday Adaptive Planning. Users experienced with integration system users, and the API clients generated when associating Workday and Workday Adaptive Planning. Users with Workday reporting and Workday Adaptive Planning integration experience. Before you start configuring tenants, you must manually configure your implementer or your security administrator's: Security access in Workday and permission set in Workday Adaptive Planning. Workday Adaptive Planning user profile so that it's mapped to their Workday user profile.
Did you enable SAML SSO in Workday 32?	Re-enable SAML SSO. You won't be able to sign in to Adaptive Planning using the Adaptive Planning worklet until you re-enable SAML SSO.
Do you want to configure SAML SSO with or without user sync?	If you configure SAML SSO with user sync: Users must access Adaptive Planning using the Adaptive Planning worklet. Workday automatically syncs the Workday and Workday Adaptive Planning user profiles for your planners. You can no longer manage passwords for users in Adaptive Planning. Workday also automatically syncs the Workday session timeout setting to Workday Adaptive Planning. Optionally, you can manage the Workday Adaptive Planning session timeout setting separately from Workday. Enable and configure notifications. If you use OfficeConnect and public APIs, you must enable those functionalities. Synced users receive Adaptive Planning alerts as Workday notifications and can use their Workday credentials to sign in to OfficeConnect. Synced users can publish plans to Workday. After user sync, you can't update these Adapting Planning APIs anymore as you now manage all synced users from Workday: createUser updateUser To assign levels or permissions to the synced users, use the Adaptive Planning application. If you configure SAML SSO without user sync: Users can access Adaptive Planning using the Adaptive Planning worklet on their Workday Home page or your IdP provider. If they're administrators, they can also sign in directly to Adaptive Planning. You must manually maintain both the Workday and Workday Adaptive Planning user profile for each user. These users continue to receive Adaptive Planning alerts as emails, and they continue to use their Adaptive Planning credentials for OfficeConnect and public APIs. These users won't be able to publish plans to the rest of Workday. Workday requires you to manually map the Workday user profile to the Workday Adaptive Planning user profile for each user. These are the only 2 ways you can configure SSO.
Why do you need user sync?	To benefit from any of these capabilities, you must configure user sync: Notifications Send synced users Workday notifications instead of Adaptive Planning email alerts about process task assignment, shared web reports, and so on. Publish Plans Send the HCM and financials data from an Adaptive Planning plan version into Workday. You can then review and report on this data. Create Positions Publish the information you gathered in the Positions modeled sheet of your workforce planning instance to Workday HCM.
Do you want to configure user sync with a single instance or multi-instances of Adaptive Planning?	You can configure user sync with both a single instance or multi-instances of Adaptive Planning. While we support the single instance setup, we highly recommend a multi-instance setup if you plan to add instances for other planning use cases. If you configure user sync with a single instance setup, you can add instances as children of the existing configuration. You can't make the instance that already syncs with Workday, a child of another instance. Example: You configure your workforce planning instance for user sync with Workday. Later, you decide to add a financial planning instance. You can only add the financial planning instance as a child of the workforce planning instance. To add the financial planning instance as a sibling, consider starting with the recommended multi-instances setup. When setting up user sync with multi-instances, use these guidelines: Ensure that the top-most parent instance is set up as your default instance. To connect to a Workday tenant, configure a single, nonfunctional instance as the top-most parent instance. This instance is primarily for administering user and access management. After the top-most parent connects to a Workday tenant and users sync with Adaptive Planning, you can’t add another instance above it as parent instance. Add the functional instances as child instances below the top-most parent instance. Example: Financial Planning and Workforce Planning. Add as many child instances below the top-most parent as required. The child instances can only extend up to 2 levels below the parent. Also, you can’t remove the top-most parent instance from the multi-instance hierarchy after you run user sync. Configure the top-most parent and all child instances in the multi-instance hierarchy for Workday using the same: Workday Tenant ID Environment UI URL REST URL
Which users do you want to be able to access both Workday and Workday Adaptive Planning?	Add these users to a security group on the Access Adaptive Planning domain. If you configure SAML SSO without user sync, you must manually: Map the Workday and Workday Adaptive Planning user profiles for each user. Create and delete Workday and Workday Adaptive Planning user profiles for each user. If you configure SAML SSO with user sync, Workday uses this domain to know which user profiles to sync. Once you sync these users: They can only access Adaptive Planning using the Adaptive Planning worklet on their Home page. You only need maintain their user profile information in Workday, such as their name and email address. If their user profiles don't exist in Adaptive Planning, we also automatically create these user profiles. If you remove users from the Access Adaptive Planning domain, we automatically remove those user profiles from Adaptive Planning. User Sync only adds the users to Workday Adaptive Planning. You must configure the permissions, groups, access rules, and associations for both existing and new user profiles.
How often do you want to check for users profiles to sync?	Workday automatically syncs users every 4 hours after you schedule user sync, but you can cancel these scheduled user syncs. You can manually sync users if you need to give a user access immediately.
Do you currently use OfficeConnect or Excel Interface for Planning?	If you configure SAML SSO with user sync: Your end users must install the latest versions before you sync your users. You and your users won't be able to use either product until you finish enabling the functionality and connecting it to Workday. If you configure SAML SSO without user sync, you can continue to sign into OfficeConnect or Excel Interface for Planning directly using your Adaptive Planning credentials.
Do you want to plan using Workday metadata?	You can import this metadata using the Workday data source in Adaptive Planning. The delivered Workday reports are: Plan dimensions and dimension hierarchies. Ledger accounts and ledger account summaries.
Do you need to use the Workday data source to configure the tenants with these features?	Workday doesn't require you to use the Workday data source for these features: SAML Single Sign-On. User sync. Notifications. Publish plans. OfficeConnect. Public APIs.

Recommendations

We recommend that you review the Security section for details on the required security access.

For first-time implementations, we recommend that you ask a consultant to configure your tenants for you.

During initial implementation or as you adopt new features, we recommend that you test the functionality in one of these environments first:

Sandbox

Implementation

If you configure SAML SSO with user sync, we recommend that you configure the

Adaptive Planning

worklet. This automatically adds the worklet to the

Home

page for your synced users.

We recommend that you import Workday metadata using the Workday data source in Adaptive Planning to take full advantage of the publish plans feature. By using the same metadata, you ensure that the plans you publish are relevant to any transactions against this plan.

Requirements

Ensure that you have Adaptive Planning Integration.

To publish Workforce Plans, enable and set up Workday Workforce Planning. Workday Workforce Planning is a separate product (SKU) that requires a separate license.

Ensure that you have Adaptive Planning Integration.

Limitations

If you run user sync and an account matches but doesn't sync, you must either:

Run user sync again.

Wait until the next scheduled sync to sync the user.

Once you enable notifications with user sync, synced users will no longer receive links in any existing Adaptive Planning alert emails. Links will be accessible through Workday notifications or emails created for these notifications.

Workday only supports email notifications for:

Process task assignments.

Sharing perspective snapshots.

Sharing web reports.

Sheets approval using workflows.

Success or failure of Integration tasks.

Access Adaptive Planning directly to download:

Your dashboard snapshot in your dashboard history.

Table data in your notifications log.

Tenant Setup

If you don't currently have a project open with a resource certified in the Workday platform, contact your Customer Success Manager to get the next steps and scope of work for the configuration. If you have a project in place, when it's appropriate in your project plan, open a ticket with Provisioning to enable the connection. The request must include:

The Workday Adaptive Planning instance ID.

The Workday tenant url.

An approval from an administrator.

You must have a project in place with an Implementer certified on the Workday platform for us to enable the connection.

In Workday, enable the User Sign-On functionality on the

Adaptive Planning

tab of the

Tenant Setup

report. If you configure SAML SSO with user sync, you must also enable or use the functionalities on these tabs:

User Sync

Notifications

You only need to enable the functionalities on these tabs if you plan to or already use them in Adaptive Planning:

OfficeConnect

Public APIs

Publish Plans

Headcount Planning

We support these features for single and multi-instance scenarios.

Security

Domains	Considerations
In the System functional area: Set Up: Tenant Setup - General Set Up: Tenant Setup - Adaptive Planning	You need access to both of these domains to configure your tenants for Adaptive Planning on the Tenant Setup report. You need both View and Modify access to the Set Up: Tenant Setup - Adaptive Planning domain.
Security Configuration in the System functional area	Enables you to configure security groups so that users can access the setup tasks, worklet, and publish-related tasks.
Set Up: Tenant Setup - BP and Notifications in the System functional area	Enables you to configure notifications routing rules.
In the System functional area: Set Up: System Set Up: Tenant Setup - Worklets	Enables you to configure the Adaptive Planning worklet so that planners automatically see the worklet on their Home pages.
Set Up: System in the System functional area	Enables you to configure the Adaptive Planning worklet to sign-inin users to Adaptive Planng without an IdP provider.
Set Up: Adaptive Planning in the System functional area	Enables you to export Workday metadata to Adaptive Planning using these reports: Plan Companies/Hierarchies Plan Dimensions/Hierarchies Ledger Accounts or Ledger Account Summaries Journal Lines Summary This domain also enables you to create workforce planning configuration managers and financial planning configuration managers.
Adaptive Planning Integration in the System functional area	Enables you to sync users manually or cancel the automatically scheduled user syncs. This domain secures the options for user provisioning but doesn't alone enable you to sync Workday accounts with Adaptive Planning. You need additional access to the Set Up: Tenant Setup - Adaptive Planning and Set Up: System domains to set up, complete, and schedule user sync.
Access Adaptive Planning in the System and Adaptive Planning functional areas	Workday checks users on this domain to see whose user profiles need to sync. We recommend that you create a user-based security group for each instance. Give this security group View and Modify access. Only members of this domain display in the presync and user sync details. These members are also filtered on the Plan Dimensions/Hierarchies report if you customize it to add assignable roles and their associated members. This domain is unconstrained.
Worklet: Adaptive Planning in the Adaptive Planning functional area	Workday automatically adds the synced users to this domain. This domain is nonconfigurable.
Set Up: Plan Publishing in the Adaptive Planning for Financial Plans functional area and Adaptive Planning for the Workforce functional area	Enables you to: Maintain plan entry types. Create, edit, and view plan structures and plan templates. Initiate plan publishing. You can only add segment-based security groups to this domain.
Access Plan Type (Segmented) in the Adaptive Planning for Financial Plans functional area and Adaptive Planning for the Workforce functional area	Enables you to access financial or headcount plans in Workday Financials or HCM.
Process: Workforce Action Plan in the Adaptive Planning for the Workforce functional area	Enables you to create positions in Workday HCM using the Review Workforce Planning Actions task.
Reports: Workforce Action Plan in the Adaptive Planning for the Workforce functional area	Enables you to access reports related to workforce plans.
Reports: Headcount Plan (Adaptive Planning) in the Adaptive Planning for Financial Plans functional area and Adaptive Planning for the Workforce functional area	Enables you to access reports related to Adaptive Planning headcount plans.
Set Up: Headcount Planning in the Adaptive Planning for the Workforce functional area	Enables you to create workforce planning configuration managers and headcount plans.
Participate: Headcount Planning domain in the Adaptive Planning for the Workforce functional area	Enables you to participate in the planning process by entering position data.
Process: Headcount Planning domain in the Adaptive Planning for the Workforce functional area	Enables you to control headcount planning events.
Compensation Details: Headcount Planning in the Adaptive Planning for the Workforce functional area	Enables you to view compensation data on headcount plans, headcount forecast plans, and reports.

In Adaptive Planning, you must have access to the top level under Owned Levels
. Also, you need a permission set with these permissions:

Admin access

Users

Permission Sets

Manage Global User Groups

General Setup

If you have multiple parent-child Adaptive Planning instances, all users sync to the top-most parent instance only. To run presync for existing users, ensure that these users exist in the top-most parent instance for matching purposes. All new users from Workday also sync to the top-most parent instance.

For OfficeConnect, you must have the Access OfficeConnect permission. If you have multiple parent-child Adaptive Planning instances and user sync is enabled, you must have this permission in the parent and all accessible child instances.

Business Processes

Configure these business processes to publish financial, headcount, or workforce Workday Adaptive Planning plans to Workday and add any approvers:

Plan Event
for financial plans.

Headcount Planning
for headcount plans.

Workforce Planning Action Event
for workforce plans.

To use plan and execute tasks for headcount planning, configure these business processes:

Headcount Planning
.

Create Position
.

Reporting

You can use these delivered reports to export Workday metadata to Adaptive Planning for your plans:

Plan Companies/Hierarchies

Plan Dimensions/Hierarchies

Ledger Accounts or Ledger Account Summaries

Journal Lines Summary

You can also use the

Plan Dimensions

report data source (RDS) to create your own custom reports to import metadata.

To import data for workforce planning, we recommend that you migrate and use these reports from your Customer Central tenant:

Plan Dimensions/Hierarchies

PLN All Positions

PLN All Workers

PLN All Workday Accounts - User Sync

PLN - Currency Conversion Rate

PLN Drillback on Headcount

PLN Initiatives

PLN Locations as Bus Site

PLN Job Management - Requisition

PLN Job Profile Dimension

PLN Worker Dimension

Integrations

If you configure SAML SSO with user sync, you must update these integration components in Workday Adaptive Planning to use Workday credentials:

Custom Cloud Data Source (CCDS).

Planning data source.

Data agents.

To prevent any gaps in services, we recommend that you, in this order:

Configure Workday credentials.

Enable user sync.

Update the integration components to use Workday credentials.

We use web services to publish plans. To enable plan publishers to publish, add their security group to the relevant business process Initiating Action on these web services:

Import Budget
(WS Background Process), for financial plans.

Import Headcount Plan
(WS Background Process), for headcount plans.

Import Workforce Planning Actions
(WS Background Process), for workforce plans.

Connections and Touchpoints

Workday offers a Touchpoints Kit with resources to help you understand configuration relationships in your tenant. Learn more about the Workday Touchpoints Kit on Workday Community.

Other Impacts

When you sync users, we change their Adaptive Planning username to match their Workday username and append this information:

Adaptive Planning instance code.

Workday tenant.

Workday environment.

Synced Adaptive Planning usernames use this format: WorkdayUsername@AdaptivePlanningInstanceCode.WorkdayTenant.WorkdayEnvironment