Skip to main content
Administrator Guide
Last Updated: 2026-08-07
Set Up Live Data Query in Tableau with JDBC Driver

Set Up Live Data Query in Tableau with JDBC Driver

Through a JDBC connection, Live Data Query enables SQL access from Tableau to Workday business objects.
  1. Install the JDBC Driver in the Tableau Directory.
    For Tableau Desktop, copy the JDBC driver .jar file to:
    • macOS : ~/Library/Tableau/Drivers/
    • Windows : C:\Program Files\Tableau\Drivers\
    If the
    Drivers
    directory does not exist, create it.
  2. (For Linux only) Set the file permissions.
    Ensure Tableau has permission to read the driver file:
    chmod 755 ~/Library/Tableau/Drivers/<driver>.jar
  3. Create a
    dataservice.properties
    file with the following configuration details using the property=value format. For sample code, see the Example section below.
    Property
    ISU
    User-As-Self
    wd.authn.authModel
    JWT_BEARER
    AUTHORIZATION_CODE
    wd.authn.clientId
    Client ID created in the Live Data Query ISU setup.
    Client ID created in the User-As-Self Authentication setup.
    wd.authn.clientSecret
    N/A
    Client secret created in the User-As-Self Authentication setup.
    wd.authn.isu
    Your ISU.
    N/A
    wd.authn.accessTokenEndpoint
    Token endpoint created in the Live Data Query ISU setup.
    Example:
    https://{HOST1}/ccx/oauth2/{TENANT}/token
    Token endpoint created in the User-As-Self Authentication setup.
    Example:
    https://{HOST1}/ccx/oauth2/{TENANT}/token
    wd.authn.authorizationEndpoint
    N/A
    Authorization endpoint created in the User-As-Self Authentication setup.
    Example:
    https://{HOST2}/{TENANT}/authorize
    wd.authn.privateKeyFilePath
    The full path of the private key file.
    • Windows Example:
      C:\Users\user.name\Documents\<privateKeyFile.txt>
    • Mac Example:
      /Users/path/to/your/private_key.pem
    For a Windows machine, you must specify the
    wd.authn.privateKeyFilePath
    property.
    The
    wd.authn.privateKey
    and
    wd.authn.privateKeyFilePath
    properties are mutually exclusive. If you specified
    wd.authn.privateKey
    , don’t specify
    wd.authn.privateKeyFilePath
    .
    N/A
    wd.authn.privateKey
    The
    wd.authn.privateKey
    and
    wd.authn.privateKeyFilePath
    properties are mutually exclusive. If you specified
    wd.authn.privateKey
    , don’t specify
    wd.authn.privateKeyFilePath
    .
    Privacy-Enhanced Mail (PEM) format text. Must include the header/footer.
    For information about the private key, see Generate Public and Private Keys for Workday Live Data Query.
    N/A
    wd.authn.redirectURL
    N/A
    https://localhost:8888/callback
    If the client is behind a proxy server, add the
    wd.http-proxy=<proxy-host>
    property in the
    dataservice.properties
    file.
  4. Launch Tableau Desktop.
    1. Open Tableau Desktop.
    2. Click
      Connect
      To a Server
      Other Databases (JDBC)
      .
    3. Enter the following information:
      Option
      Description (ISU and User-As-Self)
      URL
      jdbc:workday://{HOST}:443/workday_core?
      Note: Replace {HOST} with the {HOST1} value from the ISU or User-As-Self Authentication setup.
      Dialect
      Leave it default
      Username
      Leave it blank
      Password
      Leave it blank
      Properties File
      Upload the dataservice.properties file using the Browse button
    4. Click
      Sign In
      to open the Application.
dataservice.properties Sample Code
ISU Authentication
User-As-Self Authentication
wd.authn.authModel=JWT_BEARER wd.authn.clientId=your_client_id_here wd.authn.isu=ISU_username_here wd.authn.accessTokenEndpoint=https://{HOST1}/ccx/oauth2/{TENANT}/token wd.authn.privateKeyFilePath=/Users/path/to/your/private_key.pem
wd.authn.authModel=AUTHORIZATION_CODE wd.authn.clientId=your_user_client_id_here wd.authn.clientSecret=your_client_secret_here wd.authn.accessTokenEndpoint=https://{HOST1}/ccx/oauth2/{TENANT}/token wd.authn.authorizationEndpoint=https://{HOST2}/{TENANT}/authorize wd.authn.redirectUrl=https://localhost:8888/callback