Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-09-04
Steps: Set Up Workday Time Kiosk

Steps: Set Up Workday Time Kiosk

  • Security for administrators:
    • Security Activation
       domain in the System functional area.
    • Security Administration
       domain in the System functional area.
    • Security Configuration
       domain in the System functional area.
    • Set Up: Time Tracking
       domain in the Time Tracking functional area.
  • Security for users setting up Time Kiosks using templates:
    Set Up: Time Kiosk
     domain in the Time Tracking functional area.
The solutions described in this section are not part of the Workday Service. See Legal Notice for details.
You can install the Workday Time Kiosk app on an iPad or Android tablet so that workers can check in and out on a common device. See Workday Community: Update: Supported Devices for Time Kiosk. Time Tracking data flows from the tablet directly into Workday Time Tracking.
Workday Time Kiosk integration requires an integration system security group (ISSG).
To set up Workday Time Kiosk, you need to enable the domain security policy, create the ISSG, and register an API client just once. These are required steps before you create and set up Time Kiosk templates, which you can do many times. Before you begin these steps, ensure that you configure the
Security Administration
 domain listed in the Prerequisites.
  1. Access the
    View Domain
     report.
    1. From the
      Domain
       prompt, select the
      Process: Time Clock Event REST API’s
       domain.
    2. Click
      OK
      .
    3. From the related actions menu of the domain security policy, select
      Domain Security Policy
      Enable
      .
  2. When you're using segmented security for time entry codes, provide Time Kiosk users access to the same time entry codes that they can access on mobile and desktop.
    1. Add the ISSG to a segment-based security group.
    2. Attach the segment-based security group to a time entry code self-service segment.
    3. Add the segment-based security group to the
      Access Time Entry Code (Segmented)
       domain.
    When you want Time Kiosk users to have access to all time entry codes they are eligible for, add the ISSG directly to the
    Access Time Entry Code (Segmented)
     domain. See Steps: Set Up Segmented Security for Time Entry Codes.
  5. Share your tenant web address so that the manager can enter it on the Time Kiosk app.
    To find your web address, access the Workday Home page on desktop, and copy the URL up to your tenant name. Example: If your Home page URL is https://wd5.myworkday.com/workday/d/home.htmld, your web address is https://wd5.myworkday.com.
  6. Use the Manager Client ID that you received when you registered the API clients for Time Kiosks.
  7. (Optional) Access the
    Edit Tenant Setup - HCM
     task.
    When you want to display location next to position for multiposition workers, from the
    Additional Info on Position Display
     prompt, select
    Location
    .
    Security:
    Setup Administrator
     domain in the System functional area.
Managers and administrators can use the
Maintain Invalid Time Clock Events for Workers
 task to correct or ignore invalid time clock events for the manager's direct reports.