Enable Multifactor Authentication in Workday Studio

You can configure Workday Studio to use OAuth 2.0 authorization when it connects to a tenant. To do so, you must register an API client. Users of the client who are enrolled in Workday multifactor authentication in a tenant are required to use a second authentication method when connecting to that tenant from Studio. They can't use basic authentication.

Set up multifactor authentication in your tenant and specify which accounts are required to use it.

See Steps: Set Up Multifactor Authentication Using Authenticator App.

See Steps: Set Up Multifactor Authentication Using Duo Security.

See Steps: Set Up Multifactor Authentication Using Emailed One-Time Passcode.

See Steps: Set Up Multifactor Authentication Using SMS One-Time Passcode.

Configure these settings:

Option	Value
Client Grant Type	Authorization Grant Code
Support Proof Key for Code Exchange (PKCE)	Enabled
Access Token Type	Bearer
Redirection URI	Enter the URI provided by your organization as part of the authentication process. The URI must be reachable and encrypted by HTTPS.
Scope	In the Custom Objects list, select the functional area for every web service that you'll access. In addition select these functional areas: Implementation Integration System Tenant Non-Configurable Authentication fails if you omit any relevant web service.
Include Workday Owned Scope	Enabled

Don't select the

Enforce 60 Minute Access Token Expiry

check box. Doing so disables OAuth 2.0 authentication after that period. OAuth 2.0 authentication is also subject to the normal Workday session timeouts configured tenant-wide or for individual accounts.

See Register API Clients.

Copy the

Client ID

Authorization Endpoint

, and

Token Endpoint

provided by the Register API Client task.

From the Workday Studio

Preferences

menu, navigate to

Workday

Connections

Add a tenant connection and select the

OAuth 2.0

credentials tab.

Paste in the

Client ID

Authorization Endpoint

, and

Token Endpoint

Click

Get Access Token

If you receive an Internal Server Error message, the most likely cause is an incorrect Client ID.

Enter a username and password for the tenant.

If you're enrolled in Workday Multifactor Authentication, you're prompted to provide a second authentication method.

Test the connection.

Click

Apply and Close

2021R2 What's New Post: Multifactor Authentication in Workday Studio