> ## Documentation Index
> Fetch the complete documentation index at: https://help.doozy.live/llms.txt
> Use this file to discover all available pages before exploring further.

# Workday ISU (Recommended)

> Connect Workday to Doozy via Merge.

## Overview

To authenticate your Workday account, you will need to provide the following information:

* **WSDL** - The Web Services Endpoint URL
* **ISU Username** - Integration System User name
* **ISU Password** - Integration System User password
* **Workday Tenant Name** - Your Workday tenant identifier

## Prerequisites

* You have Administrator permissions in your company's Workday instance

***

Below are detailed steps for setting up the integration. Steps 1 to 7 are done within your Workday portal, whereas the final step is done in the Doozy app.

## Step 1: Create an Integration System User (ISU)

<Steps>
  <Step title="In your Workday portal, log into the Workday tenant." />

  <Step title="In the Search field, type 'Create Integration System User'." />

  <Step title="Select the 'Create Integration System User' task." />

  <Step title="On the 'Create Integration System User' page, in the 'Account Information' section, enter a user name, and enter and confirm a password." />

  <Step title="Click 'OK'." />

  <Step title="To ensure the password doesn't expire, search for the 'Maintain Password Rules' task." />

  <Step title="Add the ISU to the 'System Users exempt from password expiration' field." />
</Steps>

<Note>Due to XML encoding, '&', '\<', or '>' characters cannot be included in the password.</Note>
<Note>Ensure 'Require New Password at Next Sign In' is NOT checked.</Note>

## Step 2: Create a Security Group and Assign an Integration System User

<Steps>
  <Step title="In the Search field, type 'Create Security Group'." />

  <Step title="Select the 'Create Security Group' task." />

  <Step title="On the 'Create Security Group' page, select 'Integration System Security Group (Unconstrained)' from the 'Type of Tenanted Security Group' pull-down menu." />

  <Step title="In the Name field, enter a name." />

  <Step title="Click 'OK'." />

  <Step title="On the 'Edit Integration System Security Group (Unconstrained)' page, in the 'Integration System Users' field, enter the ISU name you created in Step 1." />

  <Step title="Click 'OK'." />
</Steps>

## Step 3: Configure Domain Security Policy Permissions

<Steps>
  <Step title="In the Search field, type 'Maintain Permissions for Security Group'." />

  <Step title="Make sure the 'Operation' is Maintain, and the 'Source Security Group' is the same as the security group assigned in Step 2." />

  <Step title="On the next screen, add the corresponding Domain Security Policies depending on your use case." />
</Steps>

<Note>The permissions required can differ based on your use case. See the [Workday HRIS Permissions](/integrations/workday-hris-permissions) guide for the full list of required domain security policies.</Note>

## Step 4: Activate Security Policy Changes

<Steps>
  <Step title="In the search bar, type 'Activate Pending Security Policy Changes' to view a summary of the changes that need to be approved." />

  <Step title="Add any relevant comments on the window that pops up." />

  <Step title="Confirm the changes to accept them and click 'OK'." />
</Steps>

## Step 5: Validate Authentication Policy is Sufficient

<Steps>
  <Step title="Search for 'Manage Authentication Policies'." />

  <Step title="Click 'Edit' on the authentication policy row." />

  <Step title="Create an Authentication Rule." />

  <Step title="Enter a name, add the Security Group, and ensure 'Allowed Authentication Types' is set to 'User Name Password' or 'Any'." />
</Steps>

<Note>You don't have to create a new Authentication Rule if you already have an existing one set to 'User Name Password' or 'Any'. You can add the ISU to that rule instead. You will need to create a new rule if SAML is the only Authentication Rule you see for "Allowed Authentication Types."</Note>

## Step 6: Activate All Pending Authentication Policy Changes

<Steps>
  <Step title="In the search bar, type 'Activate All Pending Authentication Policy Changes'." />

  <Step title="Proceed to the next screen and confirm the changes. This will save the Authentication Policy that was just created or edited." />
</Steps>

## Step 7: Obtain the Web Services Endpoint URL (WSDL)

<Steps>
  <Step title="Search in Workday for 'Public Web Services'." />

  <Step title="Find 'Human Resources (Public)' if you are connecting Workday HRIS, or find 'Recruiting' if you are connecting Workday ATS." />

  <Step title="Click the three dots to access the menu, then select 'Web Services' → 'View WSDL'." />

  <Step title="Navigate to the bottom of the page that opens (it may take a few seconds to load)." />

  <Step title="Copy the full URL provided under 'Human_ResourcesService' (for HRIS) or 'RecruitingService' (for ATS).">
    The URL will have a format similar to: `https://wd2-impl-services1.workday.com/ccx/service/acme/Human_Resources/v43.0`
  </Step>
</Steps>

## Enter Credentials into Doozy

<Note>You must be a **Doozy admin** to connect an HRIS integration.</Note>

<Steps>
  <Step title="Go to the Doozy web app.">Navigate to [Workspace Settings](https://doozy.live/app/settings/workspace) → **Integrations** → **HRIS**.</Step>

  <Step title="Choose Workday as the HRIS you want to connect." />

  <Step title="WSDL: Enter the full Web Services Endpoint URL you found in Step 7." />

  <Step title="ISU Username: Enter the Integration System User name created in Step 1." />

  <Step title="ISU Password: Enter the Integration System User password created in Step 1." />

  <Step title="Workday Tenant Name: Enter your Workday Tenant name.">Example: If you sign in at `https://wd5-services1.workday.com/acme`, enter `acme`.</Step>

  <Step title="Click Submit." />
</Steps>

## Notes

* The password used cannot contain '&', '\<', or '>' characters.
* Please make sure to exempt the ISU account from MFA and SSO.
* To increase API limits for your Workday tenant, contact Workday Support or your Workday Customer Account Manager through the Workday Community support portal.