Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-10-30
Set Up 1098-T IRIS Integrations

Set Up 1098-T IRIS Integrations

Register with the IRS for Information Returns Intake System (IRIS) Application-to-Application (A2A) filing and obtain your
Transmitter Control Code (TCC)
 issued for IRIS A2A.
Complete 1098-T generation setup for the tax year. See Generate 1098-T Forms.
Security:
  1. Set Up: Tax
    domain in the Common Financial Management functional area.
  2. Security Administration
     domain in the System functional area.
  3. Integration Build
    ,
    Integration Event
    , or Integration Debug domain in the Integration functional area.
  4. Reports: 1098-T domain in the Student Financials functional area.
You can set up Workday integration systems that transmit Form 1098-T student tax data to the IRS IRIS and retrieve IRS acknowledgment statuses by using these 2 delivered integration templates:
  1. IRS 1098-T Tax Reporting (Outbound) - Generation
  2. IRS 1098-T (Inbound) - Acknowledgement
To conform to official IRIS transmission size limits, each transmission file created within the outbound integration system can contain up to 40,000 payee records while maintaining a maximum file size of 100MB per file.
For legacy file-based 1098-T filing for prior tax years, see Student Financials Connectors and Set Up Integration for Student Financials Data. After the IRS retires the Filing Information Returns Electronically (FIRE) system, you must use IRIS to remain compliant with federal tax reporting mandates.
  1. Configure these domains:
    Domain
    Functional Area
    Considerations
    Integration Build
    Integration
    Provides access to setup information related to integration systems, integration IDs, transport protocols, and related setup.
    Integration Event
    Integration
    Provides access to launching integrations and viewing their status in the process monitor, including
    Launch / Schedule Integration
    .
    Integration Debug
    Integration
    Provides access to launch and debug an integration.
    Reports: 1098-T
    Student Financials
    Provides access to 1098-T reporting, including the 1098-T IRIS Transmissions report data source.
    Public Reporting Items
    System
    Provides access to publicly available class report fields such as Transmission ID, Receipt ID, Transmission Type, and Document Status.
    Security Administration
    System
    Provides access to create third-party X.509 key pairs and external client credential stores.
    Set Up: Tax
    Common Financial Management
    Provides access to enter EIN/TIN and IRIS TCC on the
    Edit Company Tax Details
     task.
  2. Access the
    Edit Company Tax Details
     task.
    Complete the
    Tax IDs
     tab:
    Option
    Description
    Employer Identification Number (EIN) / Taxpayer Identification Number (TIN)
    Enter your 9-digit EIN or TIN.
    Transmitter Control Code (TCC)
    Enter the 5-character TCC that the IRS issued for IRIS A2A integration.
    Security:
    Set Up: Tax
     domain in the Common Financial Management functional area.
  3. Access the
    Create 3rd Party X.509 Key Pair
     task.
    Upload and configure the third-party digital security certificate that Workday uses to sign IRIS transmissions.
    Security:
    Security Administration
     domain in the System functional area.
  4. Access the
    Create External Client CredStore
    task.
    Create 4 credential stores for OAuth A2A authentication with the IRS:
    • 2 User Credential Stores
      : 1 for IRS Assurance Testing System (ATS) testing, 1 for Production. Configure these for the authorized employee contact registered with the IRS who launches the transmission.
    • 2 Client Credential Stores
      : 1 for IRS ATS testing, 1 for Production. Configure these for company-level institutional credentials registered with the IRS.
    Enter the IRIS authorization endpoint and token endpoint for the matching environment (ATS or Production) from your IRS IRIS API Client / OAuth registration. Reference the X.509 private key pair from the previous step. Use the same certificate across user and client credential stores for a given API Client ID, per IRS JSON Web Key Set (JWKS) requirements.
    Complete the task for each credential store. Consider:
    Option
    Description
    App ID
    Enter values that help you identify this credential store. Examples:IRIS User ATS, IRIS User Production, IRIS Client ATS, or IRIS Client Production.
    External Reference ID
    Enter a unique reference ID for this credential store.
    Auth Scheme for External Client
    Select
    OAuth 2.0 Jwt Bearer
    .
    Client ID
    Enter the IRS IRIS API Client ID from your IRIS A2A registration.
    Client Secret
    Enter the client secret associated with your IRS IRIS API Client ID.
    Authorization Endpoint
    Leave blank for IRIS OAuth 2.0 Jwt Bearer setup.
    Token Endpoint
    Leave blank for IRIS OAuth 2.0 Jwt Bearer setup.
    Subject
    Enter the subject value from your IRS IRIS A2A / OAuth registration for this store (user or client).
    Issuer
    Enter the issuer value from your IRS IRIS A2A / OAuth registration for this store.
    Audience
    Enter the IRIS OAuth token audience URL for the matching environment. For ATS, use https://api.alt.www4.irs.gov/auth/oauth/v2/token.
    Jwt Bearer Signature Algorithm
    Select
    RS256
    .
    X509 Private Key Pair
    Select the third-party X.509 key pair you created in the previous step.
    JWT Header KID
    Enter the JWT header Key ID (KID). Required for user and client credential stores.
    Create and save all 4 stores before you create the outbound and acknowledgment integration systems.
  5. Access the
    Create Integration System
     task.
    Create an integration system from the IRS 1098-T Tax Reporting (Outbound) - Generation template.
    Workday enables these services on the outbound template:
    Service
    Description
    1098-T IRIS Deployment Configuration
    Connects the integration system to the execution environment required to run IRIS transmissions.
    1098-T IRIS Launch Parameter Configuration
    Enables selection of required launch parameters, including Calendar Year, Institutional Academic Unit, Transmitter Company/AU, Employee Contact, User Credstore, Client Credstore, and Transmission Type (Original, Correction, or Replacement). You can optionally select Student and Prior Tax Year Data.
    1098-T IRIS Payee Data
    Retrieves eligible payee 1098-T records based on the launch parameters specified when you launch the integration.
    1098-T IRIS Replacement Transmissions
    Retrieves rejected 1098-T IRIS transmissions eligible for replacement filing and their associated payee records for resubmission to the IRS. Workday uses this service only when you select Replacement as the Transmission Type at launch.
    1098-T IRIS Transmitter Data
    Captures transmitter metadata based on the selected institutional academic unit.
    Client Credential Store Configuration
    Enables selection of the IRIS client credential store used to authenticate with IRIS.
    Integration Document Retention
    Manages integration document retention with an overridable default of 90 days.
    User Credential Store Configuration
    Enables selection of the IRIS user credential store used to authenticate with IRIS.
    Security:
    Integration Build
    ,
    Integration Event
    , or
    Integration Debug
     domain in the Integration functional area.
  6. (Optional) When you enable the Filename Sequence Generator service on the outbound integration system, access the
    Configure Integration Sequence Generators
     task. Establish dynamic XML file output naming rules.
    Security:
    Integration Build
     or
    Integration Configure
     domains in the Integration functional area.
  7. Access the
    Create Integration System
     task.
    Create an integration system from the IRS 1098-T (Inbound) - Acknowledgement template.
    Workday enables these services on the acknowledgment template:
    Service
    Description
    1098-T IRIS Acknowledgment Data
    Retrieves 1098-T IRIS transmissions in Processing or Draft status so the integration can request status updates from the IRS.
    1098-T IRIS Acknowledgment Deployment Service
    Connects the integration system to the execution environment required to run IRIS transmissions.
    1098-T IRIS Acknowledgment Launch Parameter Configuration
    Enables selection of required launch parameters, including User Credstore and Client Credstore.
    Client Credential Store Configuration
    Enables selection of the IRIS client credential store used to authenticate with the IRS.
    User Credential Store Configuration
    Enables selection of the IRIS user credential store used to authenticate with the IRS.
    Security:
    Integration Build
     domain in the Integration functional area.
Workday provides configured outbound and acknowledgment integration systems that you can launch to transmit Form 1098-T data to the IRS and retrieve IRS document statuses. Credential stores and certificates remain available for ATS testing and Production filing.
  • Launch the outbound integration system and specify the required launch parameters.
  • Schedule the inbound acknowledgment integration system on a daily recurring cadence starting at least 24 hours after launching an outbound transmission.