Workday

Ingest joiner/mover/leaver HR events from Workday. Uses RaaS reports or the REST worker feed. Triggers the JML rules engine automatically.

Source connector

Source connector — pulls identity and access data from Workday into ComplianceScout where it is scored against your compliance frameworks and violation rules.

What ComplianceScout collects

After a successful sync, the following data is available in your ComplianceScout dashboard for violation detection and reporting.

Employee records with name, email, hire date, termination date, department, and manager
Position and job profile information
Joiner events (new hires) detected from changed feed
Mover events (role/department changes) detected from changed feed
Leaver events (terminations) detected from changed feed

Required credentials

These fields are collected when you add the connector in the ComplianceScout dashboard. Secrets are encrypted at rest using AES-256-GCM and are never logged.

Field	Type	Required	Notes
Workday API base URL	URL	Required	e.g. https://wd2-impl-services1.workday.com/ccx/api/v1/acme
OAuth2 Client ID	Text	Optional	Required for OAuth2 auth. Create an Integration System User with API Client credentials.
OAuth2 Client Secret	Secret	Optional	—
OAuth2 Token URL	URL	Optional	e.g. https://wd2-impl-services1.workday.com/ccx/oauth2/acme/token
ISU Username (basic auth)	Text	Optional	Required for basic auth. Integration System User account.
ISU Password (basic auth)	Secret	Optional	—
RaaS Report URL (optional)	URL	Optional	If configured, uses this Workday Report-as-a-Service URL for event discovery instead of the REST API.

How to set up this connector

Follow these steps to gather the credentials above and connect Workday to ComplianceScout.

In Workday, navigate to Security → Integration System Users → New to create a dedicated integration user.
Assign the integration user a security group with access to: Worker Data: Workers, Worker Data: Employment data.
For OAuth2: go to API Client → Create API Client. Copy the Client ID and Client Secret. Note the token endpoint URL.
In ComplianceScout, go to Data & Secrets → Integrations → Add Connector → Workday, enter the API base URL and authentication credentials, then click Test and Save.

Ready to connect Workday?

Start a free trial — your tenant is provisioned instantly and you can wire up this integration from the connectors page.

Start a free trial Add connector →