---
title: "Connect Workday"
description: "Connect Workday"
canonical_url: "https://support.pave.com/articles/connect-workday-znJMNo0we6"
md_url: "https://support.pave.com/articles/connect-workday-znJMNo0we6.md"
---
# Connect Workday

Workday is an HRIS integration that syncs employee, job, and compensation data to Pave. Workday supports three connection methods: RaaS (Report as a Service), OAuth, and SFTP.

### Which method should I use?

* **RaaS (standard)**: Use this method if your Workday admin can create a custom report and an Integration System User. This is the most common approach.
* **OAuth**: Use this method if your organization requires OAuth-based authentication instead of a username and password. The setup is similar to RaaS but adds an API client registration step.
* **SFTP**: Use this method if your organization requires file-based data transfer. SFTP setup requires assistance from Pave's team.

## Before you connect

All methods require a custom report in Workday and an Integration System User (ISU). Complete these steps before continuing.

### Create an Integration System User and Security Group

1. In Workday, search for **Create Integration System User** and create a new user for Pave. Set the password to **non-expiring**.
2. Search for **Create Security Group**. Create an **Integration System Security Group (ISSG)** and add the ISU you created.
3. Provision the ISSG with the security policies required for the data you want to sync (employee data, compensation, job information).

### Create a custom report (RaaS)

1. In Workday, search for **Create Custom Report**.
2. Select **Advanced Report** as the report type.
3. Configure the report with the fields you want to sync to Pave. Pave provides a downloadable specification file during setup with the recommended report configuration.
4. Make the report available as a **web service** and note the JSON URL. The URL must end with `format=json`.

### Additional steps for OAuth

If you are using the OAuth method, complete these additional steps after creating your report and ISU:

1. In Workday, search for **Register API Client for Integrations**.
2. Enter a client name (for example, "Pave Connection").
3. Set **Non-Expiring Refresh Tokens** to **Yes**.
4. Under **Scope (Functional Area)**, add:

   * Custom Objects
   * Core Compensation
   * Personal Data
   * Career & Development Planning
   * Any additional functional areas your Pave report pulls from
5. Set **Include Workday Owned Scope** to **Yes**.
6. Click **Done** to register the API client.
7. Next to the new API client, click the ellipsis menu and select **Manage Refresh Tokens for Integrations**.
8. In the **Workday Account** field, enter the ISU from your RaaS report. Click **OK**.
9. Select **Generate New Refresh Token** and click **Done**.
10. From the **View API Client** page, copy the Client ID, Client Secret, Refresh Token, and Token URL. You will need all four values in Pave.

## Connect Workday to Pave

### RaaS method (standard)

1. In Pave, go to **Connections** and find Workday.
2. Enter the **Username** and **Password** for your Integration System User.
3. Enter the **Report URL** (the JSON URL for your custom report). The URL must end with `format=json`.
4. If you have additional reports to sync, click **Add Report URL** and enter each one.
5. Click **Submit**.
6. Go to **Connections** and verify the Workday integration shows as connected.

### OAuth method

1. In Pave, go to **Connections** and find Workday OAuth.
2. Enter the following values from your Workday API client:

   * **Client ID**
   * **Client Secret**
   * **Refresh Token**
   * **Token URL**
3. Enter the **Report URL** (the JSON URL for your custom report). The URL must end with `format=json`.
4. If you have additional reports to sync, click **Add Report URL** and enter each one.
5. Click **Submit**.
6. Go to **Connections** and verify the Workday OAuth integration shows as connected.

### SFTP method

Contact your Pave Customer Success Engineer or email support\@pave.com to set up an SFTP-based Workday connection. Your CSE will configure the file delivery and field mapping.

## Troubleshooting

**Report URL format error** The report URL must end with `format=json`. If your URL ends with a different format or has no format parameter, update the URL in Workday and re-enter it in Pave.

**No data appears after connecting** Verify that the Integration System User has the correct security permissions and that the report returns data when run directly in Workday. If the report is empty, check that employees are included in the report's data source.

**Connection shows in error state (OAuth)** The refresh token may have expired or been revoked in Workday. Generate a new refresh token using the **Manage Refresh Tokens for Integrations** task in Workday, then update the token in Pave by clicking **Resolve** on the integration.

**Data is missing or incomplete** Check that your custom report includes all the fields Pave expects. If you added fields after the initial setup, verify they appear in the report output. For customers with multiple reports, make sure each report includes an Employee ID field so Pave can match records across reports.

## Fields that sync

Custom mappings may apply to your account. The fields available depend on what you include in your Workday custom report.

* First name, last name, preferred first name
* Work email
* Employee ID
* Employment type
* Job profile, department, management level, job family, compensation grade profile
* Manager name, manager email
* Hire date
* Work location (city, state, country)
* Base salary, hourly rate, currency
* Annual bonus, variable pay, commission
* Signing bonus, one-time bonus, relocation bonus

### Additional data

* **Compensation history**: Supported. Include historical compensation data in your custom report to sync it to Pave.
* **Custom fields**: Supported. Add any additional fields to your custom report in Workday and they will sync to Pave. No separate configuration is needed in Pave.
* **Benefits**: Supported. Include benefits data in your custom report to sync it to Pave.

<br />

# Connect Workday

Workday is an HRIS integration that syncs employee, job, and compensation data to Pave. Workday supports three connection methods: RaaS (Report as a Service), OAuth, and SFTP.

### Which method should I use?

* **RaaS (standard)**: Use this method if your Workday admin can create a custom report and an Integration System User. This is the most common approach.
* **OAuth**: Use this method if your organization requires OAuth-based authentication instead of a username and password. The setup is similar to RaaS but adds an API client registration step.
* **SFTP**: Use this method if your organization requires file-based data transfer. SFTP setup requires assistance from Pave's team.

## Before you connect

All methods require a custom report in Workday and an Integration System User (ISU). Complete these steps before continuing.

### Create an Integration System User and Security Group

1. In Workday, search for **Create Integration System User** and create a new user for Pave. Set the password to **non-expiring**.
2. Search for **Create Security Group**. Create an **Integration System Security Group (ISSG)** and add the ISU you created.
3. Provision the ISSG with the security policies required for the data you want to sync (employee data, compensation, job information).

### Create a custom report (RaaS)

1. In Workday, search for **Create Custom Report**.
2. Select **Advanced Report** as the report type.
3. Configure the report with the fields you want to sync to Pave. Pave provides a downloadable specification file during setup with the recommended report configuration.
4. Make the report available as a **web service** and note the JSON URL. The URL must end with `format=json`.

### Additional steps for OAuth

If you are using the OAuth method, complete these additional steps after creating your report and ISU:

1. In Workday, search for **Register API Client for Integrations**.
2. Enter a client name (for example, "Pave Connection").
3. Set **Non-Expiring Refresh Tokens** to **Yes**.
4. Under **Scope (Functional Area)**, add:

   * Custom Objects
   * Core Compensation
   * Personal Data
   * Career & Development Planning
   * Any additional functional areas your Pave report pulls from
5. Set **Include Workday Owned Scope** to **Yes**.
6. Click **Done** to register the API client.
7. Next to the new API client, click the ellipsis menu and select **Manage Refresh Tokens for Integrations**.
8. In the **Workday Account** field, enter the ISU from your RaaS report. Click **OK**.
9. Select **Generate New Refresh Token** and click **Done**.
10. From the **View API Client** page, copy the Client ID, Client Secret, Refresh Token, and Token URL. You will need all four values in Pave.

## Connect Workday to Pave

### RaaS method (standard)

1. In Pave, go to **Connections** and find Workday.
2. Enter the **Username** and **Password** for your Integration System User.
3. Enter the **Report URL** (the JSON URL for your custom report). The URL must end with `format=json`.
4. If you have additional reports to sync, click **Add Report URL** and enter each one.
5. Click **Submit**.
6. Go to **Connections** and verify the Workday integration shows as connected.

### OAuth method

1. In Pave, go to **Connections** and find Workday OAuth.
2. Enter the following values from your Workday API client:

   * **Client ID**
   * **Client Secret**
   * **Refresh Token**
   * **Token URL**
3. Enter the **Report URL** (the JSON URL for your custom report). The URL must end with `format=json`.
4. If you have additional reports to sync, click **Add Report URL** and enter each one.
5. Click **Submit**.
6. Go to **Connections** and verify the Workday OAuth integration shows as connected.

### SFTP method

Contact your Pave Customer Success Engineer or contact support at [support.pave.com](https://support.pave.com) to set up an SFTP-based Workday connection. Your CSE will configure the file delivery and field mapping.

## Troubleshooting

**Report URL format error** The report URL must end with `format=json`. If your URL ends with a different format or has no format parameter, update the URL in Workday and re-enter it in Pave.

**No data appears after connecting** Verify that the Integration System User has the correct security permissions and that the report returns data when run directly in Workday. If the report is empty, check that employees are included in the report's data source.

**Connection shows in error state (OAuth)** The refresh token may have expired or been revoked in Workday. Generate a new refresh token using the **Manage Refresh Tokens for Integrations** task in Workday, then update the token in Pave by clicking **Resolve** on the integration.

**Data is missing or incomplete** Check that your custom report includes all the fields Pave expects. If you added fields after the initial setup, verify they appear in the report output. For customers with multiple reports, make sure each report includes an Employee ID field so Pave can match records across reports.

## Fields that sync

Custom mappings may apply to your account. The fields available depend on what you include in your Workday custom report.

* First name, last name, preferred first name
* Work email
* Employee ID
* Employment type
* Job profile, department, management level, job family, compensation grade profile
* Manager name, manager email
* Hire date
* Work location (city, state, country)
* Base salary, hourly rate, currency
* Annual bonus, variable pay, commission
* Signing bonus, one-time bonus, relocation bonus

### Additional data

* **Compensation history**: Supported. Include historical compensation data in your custom report to sync it to Pave.
* **Custom fields**: Supported. Add any additional fields to your custom report in Workday and they will sync to Pave. No separate configuration is needed in Pave.
* **Benefits**: Supported. Include benefits data in your custom report to sync it to Pave.