SP-initiated<\/strong> user workflow<\/strong><\/h3>\n\n\n\n

\n
• Go\u00a0to the SP application login – generally, there is either a special link or an adaptive username field that detects the user is authenticated through SSO<\/li>\n<\/ul>\n\n\n\n

  <\/p><\/div>

  Note:<\/strong> \n

  This varies by SP.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

  \n
  • Login redirects the user to JumpCloud where the user enters their JumpCloud credentials<\/li>\n\n\n\n
  • After the user is logged in successfully, they are redirected\u00a0back to the SP and automatically logged in<\/li>\n<\/ul>\n\n\n\n

    Configuring the Identity Management Integration<\/strong><\/h2>\n\n\n\n

    To configure Workday<\/strong><\/h3>\n\n\n\n

    Creating a Workday Integration System User<\/strong><\/h4>\n\n\n\n

    <\/p><\/div>

    Important:<\/strong> \n

    Use good security practices for this user. It should only be used for the Workday <> JumpCloud integration and leverage a strong password.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

    <\/h4>\n\n\n\n

    \n
    1. In Workday, search “create integration system user” and select the resulting task.<\/li>\n\n\n\n
    2. Specify a User Name<\/strong> and a strong password<\/strong>.<\/li>\n\n\n\n
    3. Set the session timeout to a value as low as possible.<\/li>\n\n\n\n
    4. Select Do Not Allow UI Sessions<\/strong>.<\/li>\n\n\n\n
    5. Select OK, then Done.<\/li>\n<\/ol>\n\n\n\n

       <\/figure>\n\n\n\n

       Creating a security group<\/strong><\/h4>\n\n\n\n

       \n
       1. In Workday, search “create security group” and select the resulting task.<\/li>\n\n\n\n
       2. For Type of Tenanted Security Group, select Integration System Security Group (Unconstrained).<\/li>\n\n\n\n
       3. Specify a name for the group, select OK<\/strong>.
          <\/li>\n\n\n\n
       4. For Integration System Users, add the user created in the prior step, select OK, then Done.<\/li>\n<\/ol>\n\n\n\n

          Assigning the group to domain Security Configuration<\/strong><\/h4>\n\n\n\n

          In Workday, perform steps 1-4 for each Domain\/Permission pair in the table that follows:<\/p>\n\n\n\n

          Domain<\/td>	Permission<\/td><\/tr>
          Workday Accounts<\/td>	Get<\/td><\/tr>
          Worker Data Public Worker Reports<\/td>	Get<\/td><\/tr>
          Person Data Work Contact Information<\/td>	Get<\/td><\/tr>
          Worker Data Current Staffing Information<\/td>	Get<\/td><\/tr>
          Worker Data All Positions<\/td>	Get<\/td><\/tr>
          Worker Data Business Title on Worker Profile<\/td>	Get<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n \n Search “domain security configuration” and select the result.<\/li>\n\n\n\n In the Domain field, search the Domain from the table, select the result, select OK.<\/li>\n\n\n\n Select the (\u2026) next to the Domain name; under Actions, select Domain > Edit Security Policy Permissions<\/strong>. <\/li>\n\n\n\n Under Integrated Permissions, add the Security Group created in the above steps and select the Permission. <\/li>\n\n\n\n Select OK, then Done. If an alert to Activate Pending Security Policy Changes is displayed, do this after all domains have been updated for the security changes to take effect immediately.<\/li>\n<\/ol>\n\n\n\n To configure JumpCloud<\/strong><\/h3>\n\n\n\n Authorizing Workday<\/strong><\/h4>\n\n\n\n \n In the JumpCloud Admin Portal, navigate to DIRECTORY INTEGRATIONS > HR Directories<\/strong>.<\/li>\n\n\n\n Select the Workday tile and click Configure<\/strong>.<\/li>\n\n\n\n Under Workday Authorization, click Authorize<\/strong> Workday<\/strong>. Provide JumpCloud with the credentials for the Integration System User<\/strong> created in the steps above. <\/li>\n\n\n\n Click authorize<\/strong>.<\/li>\n<\/ol>\n\n\n\n Creating a Custom Report<\/strong><\/h4>\n\n\n\n <\/p><\/div> Important:<\/strong> \n Minimize risk by creating a report specifically for importing users to JumpCloud including only the attributes that can be utilized by JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n \n Search “create custom report” and select the result.<\/li>\n\n\n\n Specify:\n \n Report Name<\/li>\n\n\n\n For Report Type, choose Advanced.<\/li>\n\n\n\n Data Source: This will depend on the manner Workday is organized. All Active Employees is used here, but your data source may vary.<\/li>\n<\/ul>\n<\/li>\n\n\n\n Check Enable As Web Service<\/strong> and select OK<\/strong>. <\/li>\n\n\n\n Edit Custom Report : (* indicates data required for import) Attributes must be mapped in the Columns tab of the custom report, see also the example JSON data<\/a> below. The Business Object ‘Worker’<\/strong> is used for the following fields:<\/li>\n<\/ol>\n\n\n\n Field (Your field source may vary)<\/strong><\/td> Column Heading Override XML Alias<\/strong><\/td><\/tr> Workday ID*<\/td> id<\/td><\/tr> Employee ID<\/td> employee_id<\/td><\/tr> Email – Primary Work*<\/td> email<\/td><\/tr> User Name*<\/td> username<\/td><\/tr> First Name<\/td> first_name<\/td><\/tr> Last Name<\/td> last_name<\/td><\/tr> Hire Date<\/td> hire_date<\/td><\/tr> User Name**<\/td> WorkdayID<\/td><\/tr><\/tbody><\/table>