Set Up Live Data Query User-as-Self Authentication in Workday
Security:
Set Up: Tenant Setup - Security
and Security Administration
domains in the System functional area.The user-as-self authentication method enforces Workday's full security model, including row-level controls and contextual security, based on the permissions of the user who authorizes the connection.
- Access theRegister API Clienttask in Workday.Complete the task:OptionDescriptionClient NameEnter a unique API client name.Client Grant TypeSelectAuthorization Code Grant.Access Token TypeSelectBearer.Redirection URI
- For Power BI:https://oauth.powerbi.com/views/oauthredirect.html
- For all other systems:https://localhost:8888/callback?
Refresh Token Timeout (in days)Keep the default value.ScopeSelect the functional scopes you would like exposed in the catalog to users when they authenticate using user-as-self authentication. For a list of the distinct functional scopes required to provide full access, see the XLSX version of the Data Cloud Catalog.Include Workday Owned ScopeSelect the check box. - ClickOK.TheRegister API Clienttask displays the API Client information.
- Save the API Client information from theRegister API Clientpage.You’ll need this information to configure Workday connector properties in the partner platform:InformationExample or DetailsClient ID{Generated client ID}Client Secret{Generated client secret}Token Endpointhttps://{HOST1}/ccx/oauth2/{TENANT}/tokenAuthorization Endpointhttps://{HOST2}/{TENANT}/authorize
Set up Live Data Query in the partner system or analytics tool of your choice. See the
External Client Setup
section of Get Started with Workday Live Data Query.