Use the Reachdesk Workday integration to sync employee data from Workday into Reachdesk.

Before you start

To set up the Workday integration, you need to create a Workday Integration System User (ISU) and assign the required security permissions.

You will also need the following Workday details:

• Your Workday tenant

• Your Workday web services endpoint

• The Integration System User username

• The Integration System User password

Find your Workday tenant

1. Sign in to Workday

2. Check the browser address bar

3. Find your tenant name immediately after workday.com/

Find the Workday web services endpoint

1. In Workday, open the Public Web Services report

2. Find Human Resources and hover over it

3. Click the three-dot menu next to Human Resources

4. Select Web Service

5. Click View WSDL

6. Wait for the page to load fully

7. Search for wsdl:service

8. In the location attribute, copy everything before service

   • Do not include the https:// prefix

   • Example: If the line shows https://wd2-impl-services1.workday.com/ccx/service/, copy wd2-impl-services1.workday.com/ccx

Create an Integration System User in Workday

1. Sign in to your Workday tenant with an administrator account

2. In the Workday search box, search for Create Integration System User

3. Open the Create Integration System User task

4. Complete these fields:

   • User Name

   • New Password

   • New Password Verify

5. Click OK

6.  

Create a security group and assign the Integration System User

After you create the Integration System User, add it to a security group.

1. In the Workday search field, search for Create Security Group

2. Open the Create Security Group task

3. On the Create Security Group page:

   • In Type of Tenanted Security Group, select Integration System Security Group

   • In Name, enter a name for the security group

4. Click OK

5. On the Edit Integration System Security Group (Unconstrained) page, enter the same name you used when creating the Integration System User

6. Click OK

Configure domain security policy permissions

You now need to configure the Domain Security Policy Permissions for the security group.

1. In the Workday search box, search for Domain Security Policy Permissions

2. Add permissions for the following data:

• Person Data
  • Personal Data
    • Name
    • Citizenship Status
    • Date of Birth
    • Disabilities
    • Gender
    • Government IDs
    • ID Information
    • Marital Status
    • National ID Identification
    • Personal Information
    • Photo
  • Home Contact Information
    • Home Address
    • Home Email
    • Home Phone
  • Work Contact Information
    • Work Address
    • Work Email
    • Work Phone
• Worker Data
  • All Positions
  • Compensation
  • Current Staffing Information
  • Employment Data
  • Organization Information
  • Public Worker Reports
• Time Off
  • Time Off
  • Time Off Manager View
  • Time Off Balances
  • Time Off Balances Manager View

Activate pending security policy changes

Once you have configured the permissions, activate the pending security changes.

1. In the Workday search box, search for Activate Pending Security Policy Changes

2. Open the task

3. Approve and activate the pending policies on the next screen

Connect Workday in Reachdesk

Once your Workday setup is complete, connect the integration in Reachdesk.

1. In Reachdesk, go to Account > Integrations

2. Find Workday

3. Click Connect

4. Enter your Workday credentials and endpoint details. Ensure you have the following fields ready:

   • Workday Tenant Name

   • Workday Host (The endpoint you copied earlier)

   • ISU Username and Password

5. Click Connect

Sync timing and logic

When you connect a new Workday integration:

• Daily Sync: Reachdesk checks for matching users daily at 7:00 AM UTC

• Initial Fetch: The initial employee data fetch can take up to 1 hour

• Termination Logic: Reachdesk automatically excludes employees with a terminationDate in the past. Employees who have resigned but have a future termination date will still be included in syncs until that date passes

• Retroactive Sends: By default, automated campaigns only trigger for new matches after the integration is connected. To gift existing employees who already meet your criteria, you must toggle "Send gift to anyone that already match the criteria above" to ON

Frequently Asked Questions

Who can set up the Workday integration in Reachdesk? 

Only one user is required to set up the connection between Workday and Reachdesk.

Who can use the integration data after it is connected? 

Any user with access to the Reachdesk platform can use the integration data once the connection is set up. The person connecting the integration should be a Reachdesk admin or have broad visibility in Workday. They need access to:

• Employees who have left (for termination logic)

• Employees who have not yet started

• Address information

• Birthday information

• Start date information

Can I connect more than one HRIS platform at the same time? 

No. You can connect only one HRIS platform per organization at a time. For example, if your organization is connected to HiBob, you cannot connect Workday at the same time. To use Workday instead, disconnect the existing HRIS integration first.

Does Reachdesk write data back to Workday? 

No. Reachdesk has read-only access to HRIS platforms. Workday remains the source of truth. Reachdesk does not push new data or updates back into Workday.

What should I do if the integration does not sync?

If the initial sync takes longer than 24 hours, contact support@reachdesk.com.