> ## Documentation Index
> Fetch the complete documentation index at: https://help.doozy.live/llms.txt
> Use this file to discover all available pages before exploring further.

# Workday (OAuth)

> Connect Workday to Doozy via Merge using OAuth authentication.

## Overview

To authenticate your Workday account using OAuth, you will need to provide the following information:

* **WSDL** - The Web Services Endpoint URL prefix
* **Workday Tenant Name** - Your Workday tenant identifier
* **Client ID** - From the API Client registration
* **Client Secret** - From the API Client registration
* **Refresh Token** - A non-expiring refresh token
* **Token Endpoint** - The OAuth token URL

## Prerequisites

* You have Administrator permissions in your company's Workday instance

***

## Step 1: Obtain the Web Services Endpoint URL

<Steps>
  <Step title="Search in Workday for 'Public Web Services'." />

  <Step title="Find 'Human Resources (Public)' if you are connecting Workday HRIS." />

  <Step title="Click the three dots to access the menu, then select 'Web Services' → 'View WSDL'." />

  <Step title="Navigate to the bottom of the page that opens (it may take a few seconds to load)." />

  <Step title="Copy the URL prefix provided under 'Human_ResourcesService'.">
    The URL will have a format similar to: `https://wd2-impl-services1.workday.com/ccx`
  </Step>
</Steps>

## Step 2: Get Your Tenant Name

<Steps>
  <Step title="From the web services URL, find your tenant name.">
    For example, if your URL is `https://wd2-impl-services1.workday.com/ccx/service/acme/Human_Resources/v43.0`, your tenant name is `acme`.
  </Step>
</Steps>

## Step 3: Register a New API Client for Integrations

<Steps>
  <Step title="In the Search field, select the task 'Register API Client for Integrations'." />

  <Step title="On the 'Register API Client for Integrations' page, enter the following:">
    * **Client Name**: Enter a name for your API client
    * **Scope (Functional Areas)**: Add the required scopes from the table below
    * Check **Non-Expiring Refresh Tokens**
    * Check **Include Workday Owned Scope**
  </Step>

  <Step title="Click 'OK'." />

  <Step title="Save the Client Secret and Client ID that are displayed, then click 'Done'.">
    <Warning>The Client Secret is only shown once. Make sure to save it securely.</Warning>
  </Step>
</Steps>

### Required Scopes (Functional Areas)

For HRIS integrations, add the following scopes:

| Scope                                                      |
| ---------------------------------------------------------- |
| Staffing                                                   |
| Time Off and Leave *(if you need access to Time Off data)* |
| Tenant Non-Configurable                                    |
| Public Data                                                |
| Contact Information                                        |

## Step 4: Generate a Non-Expiring Refresh Token

<Steps>
  <Step title="In the Search field, select 'View API Clients'." />

  <Step title="On the 'View API Clients' page, click the 'API Clients for Integrations' tab." />

  <Step title="Save your Token Endpoint URL from this page." />

  <Step title="Click on the API client you created in Step 3." />

  <Step title="Click the three dots menu → 'API Client' → 'Manage Refresh Tokens for Integrations'." />

  <Step title="On the 'Manage Refresh Tokens for Integrations' page, add a user in the 'Workday Account' field." />

  <Step title="Save the Refresh Token that is generated.">
    <Warning>The Refresh Token is only shown once. Make sure to save it securely.</Warning>
  </Step>
</Steps>

## Enter Credentials into Doozy

<Note>You must be a **Doozy admin** to connect an HRIS integration.</Note>

<Steps>
  <Step title="Go to the Doozy web app.">Navigate to [Workspace Settings](https://doozy.live/app/settings/workspace) → **Integrations** → **HRIS**.</Step>

  <Step title="Choose Workday as the HRIS you want to connect." />

  <Step title="Select OAuth as the authentication method." />

  <Step title="WSDL: Enter the Web Services Endpoint URL prefix from Step 1." />

  <Step title="Workday Tenant Name: Enter your tenant name from Step 2." />

  <Step title="Client ID: Enter the Client ID from Step 3." />

  <Step title="Client Secret: Enter the Client Secret from Step 3." />

  <Step title="Token Endpoint: Enter the Token Endpoint URL from Step 4." />

  <Step title="Refresh Token: Enter the Refresh Token from Step 4." />

  <Step title="Click Submit." />
</Steps>

## Notes

* OAuth authentication is recommended over ISU authentication for enhanced security.
* Ensure the Workday Account used to generate the refresh token has the necessary permissions to access the data you need.
* If you need to set up domain security policies for specific data access, see our [Workday HRIS Permissions](/integrations/workday-hris-permissions) guide.