Skip to main content
Administrator Guide
Last Updated: 2023-06-23
Switch to JWT Client Grant Type in Adaptive Planning

Switch to JWT Client Grant Type in Adaptive Planning

  • Set up a Workday Credential in Adaptive Planning using Authorization Code Grant.
  • Create the ISU.
  • Set up the Integration System Security Group (ISSG).
  • Data Designer
    and
    Integration Operator
    permissions in Adaptive Planning.
Security:
  • Set Up Tenant Setup - Security
    domain in the System functional area.
  • Security Administration
    domain in the System functional area.
We recommend the JWT Bearer Token client grant type for Workday credentials in Adaptive Planning. You can edit an existing Workday credential that uses Authorization Code Grant and switch it to JWT Bearer. Switching to JWT Bearer requires registering a new API client in Workday.
  1. Navigate to
    Design Integrations
    in Adaptive Planning and select your existing Workday credential.
  2. Select
    JWT Bearer Grant
    for
    Client Type
    .
  3. Enter your ISU in
    ISU User
    .
  4. Select
    View Certificate
    in the
    Actions
    pane.
  5. Copy the entire contents of the
    Certificate
    pop-up and save the credential.
    Keep this browser tab containing your credential open.
  6. Open a new browser tab and sign in to Workday.
  7. Access the
    Register API Client
    task in Workday and register a new client.
    We recommend naming the new client
    Integration API Client
    .
  8. As you register a new API client, consider:
    Option Description
    Client Grant Type
    Select
    JWT Bearer Token
    Access Token Type
    Select
    Bearer
    .
    Create x509 Public Key
    Paste the certificate you copied from Adaptive Planning.
    Scope (Functional Areas)
    Select the functional areas that encompass the reports you use to import.
    The Functional Areas should cover your:
    • Report data sources.
    • Report data source filters.
    • Report fields.
  9. Within your Adaptive Planning browser tab, select
    Test Connection
    in the Actions pane to verify a successful connection.
    Enable and share at least one Workday report with the ISU you entered for your connection to succeed.
Disable your registered Authorization Code Grant API client if you no longer use or need it.