WorkDay Accounts SAAS Connector Entitlement Aggregation

Hi Everyone

I am performing an integration between SailPoint IDN and Workday using “Workday Accounts SAAS Connector”. I am able to fetch accounts. But when I try to do an entitlement aggregation , It is giving me an error as below. Can someone please help me how to rectify this.

Thank you

Poojitha

check cf_security group exsits in work day or not and if it is a custom field match exactly

Hi Poojitha,

The error is happening because the entitlement aggregation is trying to select a field (cf_SecurityGroupName) that doesn’t actually exist in your Workday RaaS report.

How you can fix it:

  1. Open your Workday Security Groups RaaS report and verify which columns it really exposes (for example: SecurityGroupId, SecurityGroupName, SecurityGroupType). Make sure the integration user has access and that the report is enabled as a web service.

  2. In IdentityNow, go to Source → Schema → SECURITY_GROUPS and check the attribute mappings. The attribute names there must exactly match the column IDs in the RaaS. If your schema expects cf_SecurityGroupName but the report only has SecurityGroupName, update the schema mapping (usually easier than renaming the report column).

  3. Re-discover the schema if the connector supports it, or adjust the mapping manually, then run the entitlement aggregation again.

  4. As a quick test, open the RaaS URL directly in the browser with the integration account to confirm you can see the columns being queried.

Once the schema fields and the RaaS column IDs are aligned, the aggregation should run without the “Invalid SELECT clause” error.

Thank you both, Updating the schema worked