Steps: Create Workday Credentials in Adaptive Planning

Sync your integration system user (ISU).

For headcount planning with a workforce planning configuration manager, work with a Workday-certified implementer to set up the feature. If you don't have access to an implementer, contact your Customer Success Manager to engage Professional Services.

Enable the

OAuth 2.0 Client

setting on the

Edit Tenant Setup - Security

task.

Security:

Data Designer
permission in Adaptive Planning.

Integration Operator
permission in Adaptive Planning.

Set Up Tenant Setup - Security
domain in the System functional area.

Security Administration
domain in the System functional area.

For headcount planning with a workforce planning configuration manager, ensure the integration system security group (ISSG) for your ISU includes Modify access to the Set Up: Adaptive Planning
domain in the System functional area.

You can create a credential to authenticate a specific Workday tenant and ISU with a Workday data source in an Adaptive Planning instance. A Workday credential must exist to:

Create a Workday data source in Adaptive Planning.

Activate a Workday Adaptive Planning instance in the workforce planning configuration manager in Workday.

Create loaders to import data and metadata from Workday to Adaptive Planning.

Create a Workday external system for drillback into Workday.

Publish plans from Adaptive Planning to Workday.

Publishing plans from Adaptive Planning to Workday requires a Workday credential configured with a JWT bearer token.

If you use workforce planning in Adaptive Planning, we create a Workday credential for you. You must edit the credential so that you can use it.

In Adaptive Planning, go to

Integration

Design Integrations

Create or edit your Workday credential in the

Credentials

section of the

Component Library

If you create a new Workday credential, name your credential so you can identify the Workday tenant it connects to.

If you use workforce planning, we already created a credential named Workday Credential for you to edit.

We automatically populate the

Client Grant Type

with Jwt Bearer Grant
. To publish plans, we require your credential to use the Jwt Bearer Grant
client type.

We automatically populate the

Connection

with

Local

indicates that this credential matches the Adaptive Planning instance initially paired to a Workday tenant by the Provisioning team. Only local connections let you set up Workday external systems for drilling and publishing plans from Adaptive Planning.

To create a credential for a different Workday tenant, select

External

Selecting

External

prevents you from using a credential for publishing plans and drilling from Adaptive Planning to Workday.

As you create the connection to a different Workday tenant, consider:

选项	描述
Remote Tenant ID	Copy over the text after the last / in the Workday REST API endpoint.
Remote UI URL	Copy over the fully qualified domain name without https:// from the Workday Authorization Endpoint. Don't include any of the characters following the .com.
Remote Rest URL	Copy over the fully qualified domain name without https:// from the Workday REST API Endpoint. Don't include any of the characters following the .com.

Click

View Certificate

and copy the x.509 certificate.

Use this certificate in the

task in Workday.

Don't close this web browser.

As you complete the task, consider:

选项	描述
Client Name	Enter a client name that indicates this client connects with Adaptive Planning.
Client Grant Type	Select JWT Bearer Grant .
x509 Certificate	Paste the certificate that you copied from Adaptive Planning.
Access Token Type	Select Bearer .
Scope (Functional Areas)	Select Tenant Non-configurable . If you want to access the Location dimension from Workday in Adaptive Planning, also select Organizations and Roles . Configure the security group for View Only Access and Get and Put on the domain Set Up: Organization . When you use workforce planning configuration managers, select the functional areas for all data sources and report fields on your planning application.

Copy the

Client ID

Don't browse away from the Register API Client
task before copying the

Client ID

Return to the web browser for Adaptive Planning and paste the

Client ID

Enter the

ISU

associated with this credential.

Workday recommends using an ISU for access and security to make credential maintenance and management easier.

(Optional) Click

Test Connection

in the

Actions

pane to verify that the connection succeeded .

Save the credential.

Authorization Status

and

Configuration Status

update to indicate that the configuration completed.

For headcount planning with a workforce planning configuration manager, click

When you register orchestration, you make this instance available in the

Select Instance & Activate

page in the workforce planning configuration manager in Workday.

For headcount planning with a workforce planning configuration manager, access the

Manage Workforce Planning Configuration

task to automatically create:

Levels hierarchies.

Dimensions and dimension values.

Attributes and attribute values.

Plan versions.

Personnel modeled sheet and data.

Modeled accounts for FTE, Headcount, and Cost of Workforce.

Integration data sources.

Integration metadata and data loaders.

Orchestation tasks.

Integration tasks with metadata and data refresh schedules.

Workday external systems.

For financial planning and headcount planning without a workforce planning configuration manager, create an integration system user (ISU) and API client so that you can create your Workday data source.