Workday Report
  • 20 Mar 2024
  • 3 Minutes to read
  • Contributors
  • Dark
  • PDF

Workday Report

  • Dark
  • PDF

Article Summary

This guide will teach you how to set up the connector between Workday Report (as a Service) and Clarity Security.

Estimated time to complete: 30-60 minutes

If you run into any problems, please contact your support team or

How to Setup the Connector

Step 1: Create a Workday Integration System User (ISU)

It is recommended to create a dedicated ISU in Workday to be the report owner and provide access to the report for Clarity.

You may already have a suitable ISU that you may wish to use, and that's okay. 

If you need to create one:

  1.  Go to your Workday tenant and search for "create integration system user"

  2. Under Tasks & Reports, click Create Integration System User

  3. Enter a username & password. You'll need to input these later on during Application setup in Clarity.

  4. Leave the Require New Password at Next Sign In option unchecked

  5. Enter 0 for Session Timeout Minutes

  6. Check Do Not Allow UI Sessions to ensure this user cannot sign into your Workday

  7. Click OK

NOTE: The ISU must be part of an Unconstrained Integration System Security Group with a series of "Get Only" Domain Security Policies granted to it to access the appropriate worker data. 

Step 2: Create the Custom Report in Workday

Enter the following properties:

  • Report Type = Advanced

  • Data Source = All Active and Terminated Workers. Your decision to include pre-hires should depend on whether or not Clarity is doing life-cycle management and if you want those pre-hires to be provisioned into other downstream applications before their hire date. 

  • Data Source Type = Standard

  • Primary Business Object = Worker

Add the following Columns to the report, making note of which are Required by Clarity:

  1. user_id (required)

  2. first_name (required if not using a nickname or preferred name)

  3. last_name (required)

  4. nickname (optional in place of first_name, so long as your organization never leaves this blank)

  5. email (required)

  6. active (required)

  7. super_ref (this is Manager ID, Clarity only matches on ID and not name for Manager/Supervisors)

  8. business_title

  9. position_title

  10. division

  11. category

Go to the Advanced tab and set Enable As Web Service = Yes

Go to the Share tab and make sure your  ISU is the owner of the report

Step 3: Copy the Report URL in JSON format

You'll need this for your Clarity setup to go along with the username & password of your ISU

Go to the Workday Report Console to open the list of Report URLs. Copy the JSON URL link

Step 4: Login to your Clarity Security tenant

Step 5: Click on Applications, then Marketplace

Applications > Marketplace

Step 6: Find Workday Report

Scroll to or search for Workday Report in the list of applications from the marketplace, then click Connect.

Step 7: Connect App

Complete the App Settings form.  Details for fields common to all applications can be found at the following article: Common App Configuration Steps

  • Enter the username & password for the ISU on the first tab and click Validate

Step 8: App Settings Part 1 - Add a Report

Choose Report Type: Identities

Enter the full URL that you copied in Step 3

Give the report a simple Name/Description then click Add New Report.

Clarity will connect and import the report so that you can map the fields from the report to Clarity fields

Mapping the fields should be pretty straightforward for most of them. 

Use "Attribute" for any fields such as business_title or division in order to use those fields in your Org Units/Roles in Clarity

Step 9: App Settings Part 2

Complete the App Settings form.  Details for each field can be found at the following article: Common App Configuration Steps

Configure App Step 2 - App Settings

Step 10: User Settings

Complete the User Settings form, and check the table at the top to see if any features are unsupported.  Details for each field can be found in the following article: Common App Configuration Steps

Configure App Step 3 - User Settings

Step 11: Validate Your Selections and Save


Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing).  This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes.

Need Help?

If you have any problems, contact your customer success team. You can also get in touch with our general support via email, open a support ticket. Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.

Was this article helpful?

What's Next
Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.