Workday

Workday offers software solutions for financial management, human resources, and planning. Cyderes now offers the capability to collect and ingest user activity logs directly from Workday's REST API.

Chronicle Data Types

• WORKDAY_AUDIT

Requirements

Ensure the User Activity Logging feature is enabled by selecting the "Enable User Activity Logging" option in the Edit Tenant Setup - System task

Configuration

To fetch user activity log entries from Workday's Privacy API, Workday requires you to complete the following steps:

1. Generate a certificate and key files for a Workday user account
2. Create a Workday Integration System User
3. Create a Security Group:
   • Opt for the Integration System Security Group (Unconstrained).
   • Include the user generated in step 2 within this security group.
4. Associate the security group with a domain:
   • Navigate to the View Domain function for the System Auditing domain.
   • Choose Domain > Edit Security Policy Permissions from the Actions menu related to System Auditing.
   • Append the previously created security group to both: (1) Report/Task Permissions table, granting View access, and (2) Integration Permissions table, providing Get access.
   • Execute the policy modifications by using the Activate Pending Security Policy Changes task and activating the changes you implemented.
5. Launch the "Configure Web Service Security" task and associate the integration system user with the x509 public key created in step 1.
6. Register an API client in the Workday console for Cyderes:
   • In the Workday console, search and navigate to the Register API Client configuration page.
   • Client Name: CYDERES
   • Client Grant Type: JWT Bearer Grant
   • Access Token Type: Bearer
   • x509 Certificate: Public Key (select key generated in step 1)
   • Scope Functional Areas: System

Gather Information

Please send the following to your Cyderes representative when setup is completed:

• Host URL
• Tenant
• Client ID
• Username
• Private Key