Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-11-13
Set Up Live Data Query User-as-Self Authentication in Workday

Set Up Live Data Query User-as-Self Authentication in Workday

Security:
Set Up: Tenant Setup - Security
 and
Security Administration
 domains in the System functional area.
With the user-as-self authentication method, users are prompted to log in to Workday when they attempt a Live Data Query connection. This method enforces Workday's full security model, including row level controls and contextual security, based on the permissions of the user who authorizes the connection.
  1. Access the
    Register API Client
     task in Workday.
    Complete the task:
    Option
    Description
    Client Name
    Enter a unique API client name. Example: lmcneil-ldq-as-self-api-client
    Client Grant Type
    Select
    Authorization Code Grant
    .
    Access Token Type
    Select
    Bearer
    .
    Redirection URI
    • For Power BI:
      https://oauth.powerbi.com/views/oauthredirect.html
    • For all other systems:
      https://localhost:8888/callback
    Refresh Token Timeout (in days)
    Keep the default value.
    Scope (Functional Areas)
    Select the functional scopes you would like exposed in the catalog to users when they authenticate using user-as-self authentication. For a list of the distinct functional scopes required to provide full access, see the XLSX version of the Data Cloud Catalog.
    Include Workday Owned Scope
    Select the check box.
  2. Click
    OK
    .
    The
    Register API Client
     task displays the API Client information.
  3. Save the API Client information from the
    Register API Client
     page.
    You’ll need this information to configure Workday connector properties in the partner platform:
    Information
    Example or Details
    Client ID
    {Generated client ID}
    Client Secret
    {Generated client secret}
    Token Endpoint
    https://{HOST1}/ccx/oauth2/{TENANT}/token
    Authorization Endpoint
    https://{HOST2}/{TENANT}/authorize
    It’s important to save this information now because you won’t be able to view all of it later.
Set up Live Data Query in the partner system or analytics tool of your choice. See step 2 of Get Started with Workday Live Data Query.