Workday Integration - Recognition Sharing Integration Configuration

Introduction

This document provides a step-by-step guide on how to set up Workday Recognition Sharing integration with Reward Gateway | Edenred (RGER). This integration is currently available in Australia, United Kingdom, and United States only.

The configuration includes three parts:

1. Workday Tenant Setup – giving the necessary permissions and obtaining authentication credentials for the integration.
2. Reward Manager Setup – authenticating the integration on Reward Gateway’s side and selecting which  recognition categories should be shared.
3. Workday ID Prerequisite – altering your member provisioning method of choice and adding the Workday ID field to enable the recognition sharing.

Index

Workday Tenant Setup

Creating Integration System User

Creating Integration System Security Group

Creating API Client for Integrations

Tenant Host and Tenant Name

Reward Manager Setup

Authorization

Selecting Which Recognition Categories To Share With Workday

Workday ID Prerequisite

Workday Tenant Setup

Creating Integration System User

1. Log into Workday: Navigate to your Workday login page and enter your credentials
2. Search for Create Integration System User and select the task from the search results

3. Fill Out User Information: Enter a unique username for the ISU account and set a password

4. Click the OK button to create the ISU account

Note: The Do Not Allow UI Sessions option can be enabled for an added layer of security.

Creating Integration System Security Group

1. In the Workday search bar, type Create Security Group and select the highlighted task.

2. Select Security Group Type Integration System Security Group (Unconstraint) and enter a Name for the security group. Click OK.

3. After you click OK, you will be redirected to the Edit Integration Security Group page. Here, you can assign Integration System User to the group. Choose the ISU we created earlier.

4. In the Workday search bar, type Maintain Permissions for Security Group and select the task.

5. Find your security group, select it, and click OK:

6. Find and apply the permissions the following permissions in the Domain Security Policy Permissions tab:

• Access - Get and Put
• Domain Security Policy - Worker Data: Anytime feedback

7. In the Workday search bar, type Activate Pending Security Policy Changes and select the task.

8. Apply the changes by checking the Confirm checkbox and clicking OK

Creating API Client for Integrations

In order for Reward Gateway | Edenred to share recognition moments we need to set up an API Client For Integrations in Workday. This client will use the Integration System User to add RG (Reward Gateway) recognition moments as Feedback on Employees in Workday.

1. In the Workday search bar type Register API Client for Integrations and fill out the form. Include the following scopes:

• Performance Enablement
• Staffing
• Worker Profile and Skills
• Personal Data
• Contact Information

2. Click OK
3. Copy Client ID and Client Secret

Client Secret will not be shown again after clicking Done on this window. We can regenerate new one from Client's actions:

• In Workday search bar type View API Clients
• Click on the API Clients for Integrations tab
• From the client’s actions select Generate New Client Secret

4. In Workday search bar type View API Clients and click on the API Clients for Integrations tab.
5. Locate the client in the list from it’s actions select Manage Refresh Tokens for Integrations

6. For Workday Account select the Integration System User and click OK

7. On the next screen check Generate New Refresh Token and click OK

8. Copy the newly generated refresh token

Tenant Host and Tenant Name

To make sure you are using the correct Tenant Host and Name, you can log into your Workday account and run the View API Clients task. The top of the page will look something like this:

On this screenshot in Workday REST API Endpoint:

• Tenant Host is: https://impl-services1.wd12.myworkday.com
• Tenant Name is: rewardgateway_dpt1

This completes the setup needed on Workday’s side.

Reward Manager Setup

With Workday’s API Client for Integrations set up we can now use it to share recognition moments from Reward Gateway | Edenred via Workday Recognition Sharing integration.

Authorization

Provided you have configured a Workday API Client for integrations as described in the guide Workday API Client Configuration, you will need to provide the following information:

• Client ID
• Client Secret
• Refresh Token
• Tenant Host
• Tenant Name

Selecting Which Recognition Categories To Share With Workday

In this form you can choose which Recognition Categories are relevant to employees' performance, so those recognition moments will be shared and appear in the Feedback Received section in the employee’s profile in Workday.

You can press Save and proceed to the Review and Publish step for a summary.

Workday ID Prerequisite

For this Recognition Sharing integration to work, it is necessary that all employees have the field Workday ID provided by Workday and mapped in your user provisioning method of choice – Workday API, Workday RaaS, SCIM API, or SFTP.

Note: The Workday ID field has a 32-characters long HEX value (0-9a-f), e.g.: 48bcb40b4e8c4c93360f56ae1cd851cd