Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-08-07
Register API Client for Data Lake (JWT Bearer Grant)

Register API Client for Data Lake (JWT Bearer Grant)

See the Data Lake Setup in Workday section of Get Started with Workday Data Lake. This topic is part of a larger procedure.
Security:
  • Integration Security
     domain in the Integration functional area.
  • Set Up: Tenant Setup - Security
     and
    Security Administration
     domains in the System functional area.
Data Platform Clients authenticate their connection to Workday Data Lake through API clients. Depending on the connector options in the data platform, you can either establish your connection with a JWT Bearer Grant flow (this topic) or a Refresh Token Flow.
  1. Create an Asymmetric Key Pair using your organization’s standard tool.
    The public key is used in registering the API client within Workday. The private key is used to set up a connection to Data Lake from partner platforms.
  2. Access the
    Register API Client
     task.
    The private key from the asymmetric key-pair is used in the partner platform to access the Data Lake.
    1. Complete the task:
      Option
      Description
      Client Name
      Enter a unique API client name.
      Client Grant Type
      Select
      JWT Bearer Grant
      .
      x509 Certificate
      Select
      Create x509 Public Key
      .
      Enter all details of the created certificate. Example: 
       -----BEGIN CERTIFICATE-----
MIID…..
….Nl4=
-----END CERTIFICATE-----
      Integration System User
      Add the ISU user name.
      Scope
      Select
      Data Cloud
      . If this option doesn’t display, see Set Up the Data Cloud Functional Area.
    2. Click
      OK
      .
  3. Save the API Client information from the
    Register API Client
     page.
    You’ll need this information to configure Workday connector properties in the partner platform:
    Information
    Example or Details
    Token Endpoint
    https://<HOST>/ccx/oauth2/<TENANT>/token
    Integration System User
    demo-isu
    Client ID
    BASE64_CLIENT_ID
    Sample Value:
    OTc3MmE4ZmEt...[TRUNCATED_FOR_EXAMPLE]...bUxZjIz