Workday Accounts Security Groups

[jasmedina (Jasmine Medina)]

Hi!

Anyone knows how to get the following schema:

1. User-based Security Group Name. The OOTB schema only pulls the User-based Security ID instead of the name.
2. Role-based Security Group. Based on the documentations, I don’t think there’s an OOTB schema that can pull this. Also, is it possible to use a custom API in Workday Accounts to pull this?
3. Current Role Assignment

We would need these schemas to perform certification.

Thank you so much!

[awyss (Adam Wyss)]

Jasmine,

Regarding your first question, have you performed an entitlement aggregation yet on your workday accounts source? I haven’t used this source type yet but if it behaves similar to salesforce, you’ll need to do an entitlement aggregation in order to get display names.

[jasmedina (Jasmine Medina)]

@jasmedina

• User-based Security Group Name. The OOTB schema only pulls the User-based Security ID instead of the name.
• Role-based Security Group. Based on the documentations, I don’t think there’s an OOTB schema that can pull this. Also, is it possible to use a custom API in Workday Accounts to pull this?
• Current Role Assignmen

Hi Adam,

Yes I have performed an entitlement aggregation already but it’s still returning the ID and not the name. We tested it also in Workday API and it looks like the webservice Get_Assign_User-Based_Security_Groups_Response is also returning the ID only.

[awyss (Adam Wyss)]

Then unfortunately, you’re likely going to have to submit some kind of enhancement to Workday to see if you can get the display name via API.

In the interim, you can go to your workday accounts source, download the CSV of the entitlements and add a displayName or a description manually to that flat file and then re-upload it into IdentityNow.

[mwander (Matthew Wander)]

@jasmedina

User-based Security Group Name. The OOTB schema only pulls the User-based Security ID instead of the name.

We had this same issue for the User-Based Security Groups coming in as Security ID’s we just had the Workday team go in and label them correctly. I asked my Workday Eng what attribute he changed and he said he changed the actual Reference ID or Integration ID to show the name of the SG instead of the ID “USER-BASED_SECURITY_GROUP-3-138”

[jasmedina (Jasmine Medina)]

Hi Matthew,

Thanks for your response. We suggested this to our Workday team and looks like this is the workaround for getting the name instead of the ID’s. Appreciate the help!