Skip to main content
Administrator Guide
Last Updated: 2026-08-07
Set Up Live Data Query User-as-Self Authentication in Workday

Set Up Live Data Query User-as-Self Authentication in Workday

Security:
Set Up: Tenant Setup - Security
and
Security Administration
domains in the System functional area.
The user-as-self authentication method enforces Workday's full security model, including row-level controls and contextual security, based on the permissions of the user who authorizes the connection.
  1. Access the
    Register API Client
    task in Workday.
    Complete the task:
    Option
    Description
    Client Name
    Enter a unique API client name.
    Client Grant Type
    Select
    Authorization Code Grant
    .
    Access Token Type
    Select
    Bearer
    .
    Redirection URI
    • For Power BI:
      https://oauth.powerbi.com/views/oauthredirect.html
    • For all other systems:
      https://localhost:8888/callback?
    Refresh Token Timeout (in days)
    Keep the default value.
    Scope
    Select the functional scopes you would like exposed in the catalog to users when they authenticate using user-as-self authentication. For a list of the distinct functional scopes required to provide full access, see the XLSX version of the Data Cloud Catalog.
    Include Workday Owned Scope
    Select the check box.
  2. Click
    OK
    .
    The
    Register API Client
    task displays the API Client information.
  3. Save the API Client information from the
    Register API Client
    page.
    You’ll need this information to configure Workday connector properties in the partner platform:
    Information
    Example or Details
    Client ID
    {Generated client ID}
    Client Secret
    {Generated client secret}
    Token Endpoint
    https://{HOST1}/ccx/oauth2/{TENANT}/token
    Authorization Endpoint
    https://{HOST2}/{TENANT}/authorize
Set up Live Data Query in the partner system or analytics tool of your choice. See the
External Client Setup
section of Get Started with Workday Live Data Query.