# Report as a Service (RaaS)

## Overview <a href="#overview" id="overview"></a>

The Oort security platform can integrate with Workday Report as a Service (RaaS) functionality to ingest Workday HR data in an automated fashion.

Workday HR data provides a key element to managing identities and identity security in your organization, as the HRIS system is frequently the source of truth for both internal and third party B2B users.

This document will walk you through the process of setting up access to Workday and will also walk you through the setup inside of the Oort console.

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2F0n3ifMOxYSESHeEPe4nq%2FWorkday%20New%20Integration.png?alt=media&#x26;token=5d542449-54e6-40c7-aadb-4c5bb933c8ae" alt="New Workday Integration General Settings"><figcaption><p>New Workday Integration - General Settings</p></figcaption></figure>

### Workday Report as a Service Configuration <a href="#workday-report-as-a-service-configuration" id="workday-report-as-a-service-configuration"></a>

**NOTE** - This article assumes some familiarity with Workday platform administration. The purpose of the document is to provide the report structure and parameters, as well as provide guidance in the Oort configuration.

The high level steps to complete this task in Workday are as follows:

1. Create a Workday Integration System User (ISU) ([example documentation](https://docs.pingidentity.com/bundle/pingone/page/yia1649796283042.html)) - this user will act as the report owner and provide access to it from the Oort platform
2. Create the custom report as defined below
3. Enable the report as a web service in Advanced settings
4. Ensure that the ISU created in Step 1 is the owner of the report in the Share settings
5. Configure the Workday Report inside of the Oort console.

#### Create Workday ISU <a href="#create-workday-isu" id="create-workday-isu"></a>

To create the integration system user, follow the example documentation above or proceed as follows:

1. Go to your Workday tenant and enter create integration system user in the search field. Under Tasks & Reports, click Create Integration System User.
2. Enter a username and password for the new user.
3. Leave the Require New Password at Next Sign In option clear.
4. For Session Timeout Minutes, enter 0.
5. Select Do Not Allow UI Sessions to prevent this user from signing into Workday.
6. Click OK.

Ensure that the ISU created above is a member of the necessary security groups within Workday to be an owner of the report to be created in the next step.

#### Create Custom Report <a href="#create-custom-report" id="create-custom-report"></a>

Create a custom report in Workday with the following properties:

* Report type - Advanced
* Data source - All users (active, terminated, pre-hire) - This will depend on your Workday data structure.
* Data source type - Standard
* Primary business object - Worker

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FKXXypvvw34wiD7NSEI0q%2FWorkday%20Custom%20Report.png?alt=media&#x26;token=e1ae8ffa-f3ca-41d9-8661-b8a17f1a333c" alt="Workday Custom Report Details"><figcaption><p>Workday Custom Report</p></figcaption></figure>

Add the following columns to the report, in this order. Some of the columns will be Workday native or static fields and some will be calculated fields. \
\ <mark style="color:red;">**NOTE**</mark> - Please ensure that the **Column Heading Override** and **Column Heading Override XML Alias** columns use these specific names, so that the product can map the attributes correctly.&#x20;

1. user\_id
2. first\_name
3. middle\_name
4. last\_name
5. nickname
6. email
7. active
8. org\_name
9. business\_title
10. super\_ref - (Manager ID)
11. managername
12. position\_title
13. division
14. city
15. state
16. country
17. hire\_date
18. termination\_date
19. category

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2F5UAmh95Nv6xj2joxcxLS%2FWorkday%20Object%20Columns.png?alt=media&#x26;token=0d9660b0-ae82-4b4c-9b29-d8526c15e01a" alt="Workday Worker Fields"><figcaption><p>Workday - Report Fields for Worker</p></figcaption></figure>

#### Work Report Properties & Examples

{% hint style="info" %}
Please note that value names are case sensitive!
{% endhint %}

<table><thead><tr><th>Name</th><th>Description</th><th>Value Examples [Usage Notes]</th><th data-hidden>Type/Format</th><th data-hidden>Is Required</th><th data-hidden>How used in Oort</th></tr></thead><tbody><tr><td>user_id</td><td>Employee/User ID</td><td>14651848</td><td>Numeric</td><td>Yes</td><td></td></tr><tr><td>first_name</td><td>First Name</td><td>Robert</td><td>String</td><td>No</td><td></td></tr><tr><td>middle_name</td><td>Middle Name</td><td>Douglas</td><td>String</td><td>No</td><td></td></tr><tr><td>last_name</td><td>Last Name</td><td>McGurrin</td><td>String</td><td>No</td><td></td></tr><tr><td>nickname</td><td>Nickname</td><td>Bob</td><td>String</td><td>No</td><td></td></tr><tr><td>email</td><td>Email Address</td><td>dmcgurrin@personal.com</td><td>String</td><td>No</td><td></td></tr><tr><td>active</td><td>Is User Active?</td><td><code>true</code> or <code>false</code></td><td>Boolean</td><td>No</td><td></td></tr><tr><td>org_name</td><td>Organization Name</td><td>P&#x26;S Broadcast</td><td>String</td><td>No</td><td></td></tr><tr><td>business_title</td><td>Business Title</td><td>Partner Account Director [Combined with <code>position_title]</code></td><td>String</td><td>No</td><td></td></tr><tr><td>super_ref</td><td>Employee/User ID of the Supervisor/Manager</td><td>91601870</td><td>String</td><td>No</td><td></td></tr><tr><td>managername</td><td>Name of the Supervisor/Manager</td><td>Marc Heady</td><td>String</td><td>No</td><td></td></tr><tr><td>position_title</td><td>Position Title</td><td>SW Development Eng [Combined with <code>business_title</code>]</td><td>String</td><td>No</td><td>Maps to <code>Title</code></td></tr><tr><td>division</td><td>Company Division</td><td>Belgium Division</td><td>String</td><td>No</td><td></td></tr><tr><td>city</td><td>City</td><td>Sacramento</td><td>String</td><td>No</td><td></td></tr><tr><td>state</td><td>State</td><td>CA</td><td>String</td><td>No</td><td></td></tr><tr><td>country</td><td>Country</td><td>United States</td><td>String</td><td>No</td><td></td></tr><tr><td>hire_date</td><td>Initial Hire Date</td><td>2022-10-26 or 2022-10-26T17:30:00.000</td><td>ISO 8601 Date Format</td><td>Yes</td><td>Maps to <code>Start Date</code> (verify)</td></tr><tr><td>termination_date</td><td>Termination Date</td><td>2022-10-26 or 2022-10-26T17:30:00.000</td><td>ISO 8601 Date Format</td><td>Yes, if user is not active</td><td></td></tr><tr><td>category</td><td>Category of User </td><td>Contingent Worker</td><td>String</td><td>Yes</td><td>Used as User Type and to determine User Type Classification (internal/external)</td></tr></tbody></table>

Enable this Report as a Web Service in the Advanced tab.

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2F5R0r8tffiH9MMKVKgLA5%2FWorkday%20Workder%20Additional%20Info.png?alt=media&#x26;token=5624cdd9-5b08-45d3-bb22-7d72cc6a2b0c" alt="Enable as a Web Service should be Yes"><figcaption><p>Enable As Web Service</p></figcaption></figure>

Ensure that the ISU user created above is listed as the Owner of the report in the **Share** tab.

Note - **The ISU user will need access to ALL of the data fields in the report.**

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2F2MhJTrl5w41ZSfe6PCpM%2FWorkday%20Report%20Owned%20By.png?alt=media&#x26;token=a948b396-13f5-4409-a22e-80a673fa953f" alt="Workday Report Owned By"><figcaption><p>Verify the <code>Report Owned by</code> field</p></figcaption></figure>

Copy the Report URL in JSON format for use in the Oort integration configuration.

Note - the Report URL can be obtained at the following location in the Workday report console.

The report URL must be for the **JSON format**.

Open the list of Report URLs in a new tab and right-click -> copy the JSON URL link below.

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FhSVyopykgIOsf0OO90wo%2FWorkday%20Copy%20JSON%20URL.png?alt=media&#x26;token=3873a2d0-bc84-493c-9b8d-d8198b9b1889" alt="Copy the Workday JSON URL"><figcaption><p>Copy the JSON URL</p></figcaption></figure>

### Oort Configuration <a href="#oort-configuration" id="oort-configuration"></a>

Within the Oort console, navigate to -

**Integrations -> New Integration -> Workday**

Enter the following information according to the instructions below.

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2F0n3ifMOxYSESHeEPe4nq%2FWorkday%20New%20Integration.png?alt=media&#x26;token=5d542449-54e6-40c7-aadb-4c5bb933c8ae" alt=""><figcaption><p>New Workday Integration - General Settings</p></figcaption></figure>

1. Enter a `Name` for the integration (just a display name)
2. Enter your **Workday Report JSON** **URL** created previously
3. Enter the **ISU username and password** for the Workday ISU service account that was created previously
4. Click **Save**.

### Start Collection for the Workday Integration <a href="#start-collection-for-the-workday-integration" id="start-collection-for-the-workday-integration"></a>

Data collection for new integrations occurs automatically every 24 hrs overnight, but to manually start the collection process, do the following.

Click the **three dot option menu** on the newly created Workday RaaS integration and select **Collect Now**.

This process may take some time depending on the size of the Workday user population.

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FAZcZSnoSGXbLFbWRY5ao%2FCollect%20Now.png?alt=media&#x26;token=d2c5a2c1-c059-417e-981d-aa1045dfd775" alt="Click the Collect Now button to start the data collection"><figcaption><p>Collect Now</p></figcaption></figure>
