Workday integration

• ServiceNow: admin, IntegrationHub, Workday spoke, and HR Service Delivery.
• Workday: an Integration System User (ISU) with a security group granting the needed domains.
• The Workday tenant, WSDL/REST endpoint, and (optionally) a report-as-a-service (RaaS) URL.

• In Workday, create an ISU and add it to an Integration System Security Group with access to Staffing/Personal Data.
• Enable Do Not Allow UI Sessions and set a strong password; note the credentials.

• Install the Workday spoke.
• Create a Basic Auth credential (ISU@tenant) and a Connection to the Workday endpoint; attach to the spoke alias.

Workday Worker              ServiceNow (sys_user / hr_profile)
Worker_ID               ->  employee_number
Legal_Name              ->  name
Primary_Work_Email      ->  email
Manager_Reference       ->  manager
Hire_Date               ->  u_hire_date
Termination_Date        ->  (drives deactivation)

• Build a flow that calls Get_Workers (or a RaaS report) on a schedule (e.g. every 15 min) filtered by last modified.
• Upsert sys_user keyed on employee_number; create HR profiles for new hires.
• For near real time, subscribe to Workday notifications/EIB that POST to a ServiceNow Scripted REST endpoint.

• When a new worker with a future hire date appears, kick off the HRSD onboarding lifecycle case and its tasks.
• On termination date, trigger offboarding and downstream de-provisioning (e.g. via SailPoint/Okta).

• Hire a test worker in Workday sandbox; confirm the user + onboarding case appear.
• Terminate the worker; confirm offboarding fires.

• Empty results: ISU security group missing a domain.
• Duplicates: coalesce on employee_number.
• SOAP faults: verify the Workday API version in the endpoint URL.