Workday Access Requirements - HR Cases
Workday Access Requirements - HR Cases
Workday Access Requirements - HR Cases
You will need to provide the following to Moveworks.
👉 Provide provide ALL of the above to your Moveworks Customer Success team via encrypted email.
Please create an Integration System User (ISU) and Integration System Security Group (ISSG).
Create Integration System User (ISU) Workday Task.
Create Integration System User (ISU) Workday Task to create a user following these settings. Write down the username and password that you use.

Create Security Group task.
Integration System Security Group (Unconstrained) (ISSG). Title it “ISSG_Moveworks” for best practices.
All Workday Accounts report to find the account again.
Assign Integration System Security Groups.

View Security Group Report.


Activate Pending Security Policy Changes task.
Note: The Modify and Put permissions are not necessarily required to identify users. The View and Get permissions should be enough for the use case. However, we might need to explore those permissions too if we fail to fetch users using just the View and Get permission types.
Please create an API Client for Integrations and provide the following function areas (scopes). Then create a refresh token for the ISU you created earlier.
Register API Client for Integrations.


View API Clients. Write down the Token Endpoint and Workday REST API Endpoint.
View API Clients view, click on the API Clients for Integrations tab. Click on the API Client you just created.
Manage Refresh Tokens for Integrations.

Generate Refresh Token.

Check the box for OAuth 2.0 Clients Enabled
Access the Edit Tenant Setup – Security task and select the checkbox for OAuth 2.0 Clients Enabled
Follow the above step with the help of this screenshot and box in red

Create each of the following reports into your Workday instance. Transfer ownership to our ISU, then share the JSON URL with your Moveworks Customer Success team.
Moveworks Cases Retrieval.xlsx
We use this report to detect when new cases are created or previously created cases are updated in your Workday instance.
Please provide all the prompts (default and additional) as mentioned in the file above since they are crucial for the integration to function.
Moveworks Case Types Retrieval.xlsx
Please ensure your Workday instance has a description (Case Type Description) attached to each of your Case Types. If you don’t have a description field, please create descriptions for your Case Types.
This is important because both the title and the description of the Case Type are required by our Machine Learning models to determine the correct Case Type based on the query that the user has raised.
We use this report to get the list of Case Type and their details from your Workday instance.
Please provide all the prompts (default and additional) as mentioned in the file above since they are crucial for the integration to function.
Repeat the steps below for EACH report you need to create, which are the Case Retrieval Report and the Case Type Details Report.
Create Custom Report task.


Make sure to copy over all tabs EXACTLY. The naming and capitalization are both important.
Authorize the ISU you created earlier to run the report from the Share tab.

On the Advanced tab, select the enable as a web service box to enable it for API consumption

Save the report.
From the related actions of the custom report, select Web Service -> View URLs:

Scroll down to JSON and right click on the hyperlink to select “Copy URL”. Share this URL with your Moveworks Customer Success team.

We recommend doing this so that our ISU has access to report even if a member of your Workday Reports team leaves the company.
