Workday Report

The Workday Report includes custom fields to minimize the release of personally identifiable information (PII) while creating a custom worker data report for SaaS Management. You only need to complete this report if you are using the report method for your organization’s Human Capital Management (Workday) integration.

The following sections explain prerequisites, resources, and instructions for integrating with SaaS Management.

• Stored Workday Report Information

• Required Minimum Permissions for Workday Report

• Workday Report Authentication Method

• Required Workday Report Credentials

• Creating the Custom Report for Flexera SaaS Management Worker Data

• Integrating Workday Report With SaaS Management

• Workday Report API Endpoint

Stored Workday Report Information

The following table describes the available integration task and stored data within SaaS Management.

Available Integration Task	Information Stored
HR Roster	User ID Email Email Aliases First name Last name Active Date Inactive Date Location Department

note

The information stored is subject to change as enhancements are made to the SaaS application.

Required Minimum Permissions for Workday Report

The integration user must have Get access to the following security policy— Worker Data - Public Worker Reports (part of Staffing Functional Area).

Workday Report Authentication Method

WS-Security is the required authentication method.

Required Workday Report Credentials

The following credentials are required:

• Username

• Password

• Report URL

• Options

Creating the Custom Report for Flexera SaaS Management Worker Data

Your organization’s Workday Administrator completes the following tasks to create a custom worker data report for SaaS Management. This report includes custom fields to minimize the release of personally identifiable information (PII).

note

You only need to complete the following custom Workday report tasks if you are using the report method for your organization’s Human Capital Management (Workday) integration.

• Creating a Security Group

• Creating an Integration System User

• Creating a Custom Worker Data Report

  • Flexera SaaS Management Worker Data

  • Calculated Field: TF Hire Date <=Today

  • Calculated Field: DD - Number of Days between Hire Data and Today

Creating a Security Group

The first part of creating the Workday report is to create a security group in Workday.

To create a security group:

1. Sign in to Workday.
2. Go to Task > Create Security Group. The Create Security Group page opens.
3. In the Type of Tenanted Security Group field, enter or select Integration System Security Group (Unconstrained).
4. In the Name field, enter ISSG_FSM_Reports to save the report.
   note

   Flexera uses the prefix ISSG for all Integration System Security Groups.

5. If you need to make any edits or add comments to the ISSG_FSM_Reports, go to Integration System Security Group (Unconstrained) and select ISSG_FSM_Reports.
6. To the right of the ISSG_FSM_Reports report name is an oval-shaped pill labeled Actions. Click the Actions pill to open it.
7. Select the edit option. The Edit Integration System Security Group (Unconstrained) dialog box opens.
8. Make any necessary edits or add comments in the Comment field.
9. To add security permissions to the new security group, select the Actions pill to the right of the ISSG_FSM_Reports report name. The Actions menu opens.
10. Go to Security Group and select Maintain Security Permissions. The Maintain Security Permissions page opens.
11. In the Report/Task Permissions section, go to the Domain Security Policies permitting View access field. Search for the domain by clicking the hamburger menu icon (three horizontal lines) to open the search field. Start typing the domain name worker data: current staffing information.
12. Click Enter to review the results and check the box within the Search Results to confirm the selected domain.
13. In the Integration Permissions section, go to the Domain Security Policies permitting Get access field. Search for the domain by clicking the hamburger menu icon to open the search field. Enter the domain name (worker data: current staffing information).
14. Click Enter to review the results and check the box within the Search Results to confirm the selected domain.
15. To activate a security policy change in Workday, go to Task > Activate Pending Security Policy Changes. The Activate Pending Security Policy Changes page opens.
16. Enter any necessary comments in the Comment field.
17. Click the Confirm checkbox to display a check mark.

Creating an Integration System User

After Creating a Security Group, you need to create an integration system user in Workday.

To create an integration system user:

1. Sign in to Workday.
2. Go to Task > Create Security Group. The Create Security Group page opens.
3. In the Type of Tenanted Security Group field, enter or select Integration System Security Group (Unconstrained).
4. In the Name field, enter ISSG_FSM_Reports to save the report.
   note

   Flexera uses the prefix ISSG for all Integration System Security Groups.

5. If you need to make any edits or add comments to the ISSG_FSM_Reports, go to Integration System Security Group (Unconstrained) and select ISSG_FSM_Reports.
6. To the right of the ISSG_FSM_Reports report name is an oval-shaped pill labeled Actions. Click the Actions pill to open it.
7. Select the edit option. The Edit Integration System Security Group (Unconstrained) dialog box opens.
8. Make any necessary edits or add comments in the Comment field.
9. To add security permissions to the new security group, select the Actions pill to the right of the ISSG_FSM_Reports report name. The Actions menu opens.
10. Go to Security Group and select Maintain Security Permissions. The Maintain Security Permissions page opens.
11. In the Report/Task Permissions section, go to the Domain Security Policies permitting View access field. Search for the domain by clicking the hamburger menu icon (three horizontal lines) to open the search field. Start typing the domain name worker data: current staffing information.
12. Click Enter to review the results and check the box within the Search Results to confirm the selected domain.
13. In the Integration Permissions section, go to the Domain Security Policies permitting Get access field. Search for the domain by clicking the hamburger menu icon to open the search field. Enter the domain name (worker data: current staffing information).
14. Click Enter to review the results and check the box within the Search Results to confirm the selected domain.
15. To activate a security policy change in Workday, go to Task > Activate Pending Security Policy Changes. The Activate Pending Security Policy Changes page opens.
16. Enter any necessary comments in the Comment field.
17. Click the Confirm checkbox to display a check mark.

Creating a Custom Worker Data Report

After you finish Creating an Integration System User, complete the following steps in Workday to create a custom worker data report.

To create a custom worker data report:

1. Sign in to Workday.

2. Go to Task > Create Security Group. The Create Security Group page opens.

3. In the Type of Tenanted Security Group field, enter or select Integration System Security Group (Unconstrained).

4. In the Name field, enter ISSG_FSM_Reports to save the report.

   note

   Flexera uses the prefix ISSG for all Integration System Security Groups.

5. If you need to make any edits or add comments to the ISSG_FSM_Reports, go to Integration System Security Group (Unconstrained) and select ISSG_FSM_Reports.

6. To the right of the ISSG_FSM_Reports report name is an oval-shaped pill labeled Actions. Click the Actions pill to open it.

7. Select the edit option. The Edit Integration System Security Group (Unconstrained) dialog box opens.

8. Make any necessary edits or add comments in the Comment field.

9. To add security permissions to the new security group, select the Actions pill to the right of the ISSG_FSM_Reports report name. The Actions menu opens.

10. Go to Security Group and select Maintain Security Permissions. The Maintain Security Permissions page opens.

11. In the Report/Task Permissions section, go to the Domain Security Policies permitting View access field. Search for the domain by clicking the hamburger menu icon (three horizontal lines) to open the search field. Start typing the domain name worker data: current staffing information.

12. Click Enter to review the results and check the box within the Search Results to confirm the selected domain.

13. In the Integration Permissions section, go to the Domain Security Policies permitting Get access field. Search for the domain by clicking the hamburger menu icon to open the search field. Enter the domain name (worker data: current staffing information).

14. Click Enter to review the results and check the box within the Search Results to confirm the selected domain.

15. To activate a security policy change in Workday, go to Task > Activate Pending Security Policy Changes. The Activate Pending Security Policy Changes page opens.

16. Enter any necessary comments in the Comment field.

17. Click the Confirm checkbox to display a check mark.

    Field	Column Heading Override	Column Heading Override XML Alias
    Employee ID	UserID	UserID
    Email - Primary Work	Email	Email
    Email - Work	EmailAliases	EmailAliases
    Legal Name - First Name	FirstName	FirstName
    Legal Name - Last Name	LastName	LastName
    Hire Date	ActiveDate	ActiveDate
    Termination Date	InactiveDate	InactiveDate
    Location	Location	Location
    Cost Center	Department	Department

18. Go to the Additional Info menu and click the Filter tab to add filters for the date ranges to include for newly active and newly inactive employees. If not already done, create the following calculated fields.

warning

The filters provided in the following table are only for ongoing imports of the HR Roster. For the first import of the HR Roster, it is highly recommended to build an initial report of all active/employed users as a baseline. Then use the Full import option prior to changing to a Partial import with a 30-day window of data.

note

The following date range filters are examples. You may set up your organization’s date range filters when creating a custom worker data report.

And/Or	(	Field	Operator	Comparison Type	Comparison Value
And	(	CF - DD - Number of days between hire date and today	less than or equal to	Value specified in this filter	This value is based on your organization’s needs for determining the relevant population. For example, you may use 30 for 30 days.
And		CF TF Hire Date <= today	equal to	Value specified in this filter	Select the checkbox to display a check mark.
Or		Termination Date	greater than or equal to	Value from another field	Today - 30 days

1. Go to the Additional Info menu and click the Share tab to share these calculated fields with specified users and groups. In the Authorized Users field, click the hamburger menu icon to search for and select ISU_FSM_Reports.
2. Go to the Additional Info menu and click the Advanced tab to confirm that the Web Services Options section is populated with the following:

   • Enable As Web Service checkbox displays a check mark.

   • Web Service API Version field displays v34.2

   • Namespace field displays urn:com.workday.report/MetaSaaS_Worker_Data

3. Click OK to save the report.
4. To obtain the report webservices URL, go to the Report Name (Flexera SaaS Management Worker Data). Click the Actions oval-shaped pill, go to Web Service and select View URLs. The View URLs Web Service page opens.
5. Scroll down to JSON, right-click to select the JSON hyperlink, and click Copy URL.
6. Save the URL path to share with your organization’s SaaS Management Administrator.

Integrating Workday Report With SaaS Management

Send the report credentials and options from Creating the Custom Report for Flexera SaaS Management Worker Data to your organization’s SaaS Management Administrator. These credentials enable the SaaS Management Administrator to call the Flexera SaaS Management Worker Data report through the Workday web service. Your organization’s SaaS Management Administrator completes the following steps to integrate the Workday Report with SaaS Management.

To integrate Workday Report with SaaS Management:

1. Add the Workday Report application in SaaS Management. For more information, see Adding an Application.
2. Complete the Workday Report application slideout fields with the following information:

   • Username

   • Password

   • Report URL —In this field, enter the JSON URL from Creating the Custom Report for Flexera SaaS Management Worker Data.

   • Options —This field determines what SaaS Management does with the results received from Workday. Enter the appropriate option Full or Partial in this field.

     • Full —Involves a complete overwrite of the existing HR Roster in SaaS Management with the new result set received from Workday. Your Workday Report should not be a partial window of data. The Workday Report should include all current Workday users. Full should only be used for the initial population or if you need to repopulate your data from scratch.

     • Partial —Is the default option if the Options field is left blank. If the Partial option is chosen, the existing HR Roster is kept in SaaS Management, and the HR Roster is updated with the result set received from Workday. If you choose this option, it is highly recommended to use the filters provided in the table under Creating a Custom Worker Data Report.

3. Click Authorize.

Workday Report API Endpoint

HR Roster

note

The Report URL input from Integrating Workday Report With SaaS Management is considered the API endpoint and is also used to fetch the HR Roster data.