Workday cloud-based ERP products help companies reduce or eliminate hard-to-use, legacy apps for finance, HR, project management, and more. Workday supports enterprise single sign-on with Centrify Identity Service, making it easy to set up and administer multiple user accounts. With an integration to Centrify, Workday can serve as the master employee database within the enterprise. New hires, transitions and departures are managed by HR within the HR system while Centrify automatically provisions or de-provisions accounts into Active Directory and downstream productivity applications.

1. © 2017 Centrify Corporations. All Rights Reserved.1
Welcome to
“Centrify Customer Success
Webinar - Expert Hour for
Workday”
This webinar will start shortly at
11am PT / 2pm ET
Questions? Join the conversation in our community at
community.centrify.com

2. © 2017 Centrify Corporations. All Rights Reserved.2
Centrify Customer
Success Webinar
Expert Hour for Workday

3. © 2017 Centrify Corporations. All Rights Reserved.3
• Configure Inbound Provisioning at the Workday and Centrify Admin portals.
• Create Workday SAML app at the Centrify Admin Portal
• User access to the Workday application
• Syncing terminated Workday users
Outline

4. © 2017 Centrify Corporations. All Rights Reserved.4
Workday Portal
configuration

5. © 2017 Centrify Corporations. All Rights Reserved.5
Inbound
Provisioning
Pre-requisites

6. © 2017 Centrify Corporations. All Rights Reserved.6
Inbound Provisioning prerequisites
Before you start configuring inbound provisioning at the Centrify
Admin Portal, confirm that you have done the following:
§ Configured Workday for inbound provisioning at the Workday
portal
§ Store a domain administrator account at the Centrify Admin
portal.
- This step is only required if the Connector is not run by a domain administrator
§ Populated the relevant user data in Workday.
§ Installed the Centrify Connector.

7. © 2017 Centrify Corporations. All Rights Reserved.7
Configure
Workday

8. © 2017 Centrify Corporations. All Rights Reserved.8
Configure Workday
§ Creating an integration system user
§ Creating a security group
§ Assigning the integration system user to the security group
§ Configuring security group options
§ Activating security policy changes

9. © 2017 Centrify Corporations. All Rights Reserved.9
Creating an integration system user

10. © 2017 Centrify Corporations. All Rights Reserved.10
Creating a security group

11. © 2017 Centrify Corporations. All Rights Reserved.11
Assigning the integration system user to the security group

12. © 2017 Centrify Corporations. All Rights Reserved.12
Configuring security group options
This procedure allows the systems administrator to grant the new security
group permissions for Get operations on the objects secured by the
following domain security policies:
§ Manage: Organization Integration
§ External Account Provisioning
§ Worker Data: Public Worker Reports
§ Worker Data: All Positions
§ Worker Data: Current Staffing Information
§ Worker Data: Business Title on Worker Profile
§ Worker Data: Organization Information

13. © 2017 Centrify Corporations. All Rights Reserved.13
Configuring security group options con’t

14. © 2017 Centrify Corporations. All Rights Reserved.14
Configuring security group options con’t

15. © 2017 Centrify Corporations. All Rights Reserved.15
Configuring security group options con’t

16. © 2017 Centrify Corporations. All Rights Reserved.16
Configuring security group options con’t

17. © 2017 Centrify Corporations. All Rights Reserved.17
Configuring security group options con’t

18. © 2017 Centrify Corporations. All Rights Reserved.18
Configuring security group options con’t

19. © 2017 Centrify Corporations. All Rights Reserved.19
Configuring security group options con’t

20. © 2017 Centrify Corporations. All Rights Reserved.20
Configuring security group options con’t

21. © 2017 Centrify Corporations. All Rights Reserved.21
Configuring security group options con’t

22. © 2017 Centrify Corporations. All Rights Reserved.22
Configuring security group options con’t

23. © 2017 Centrify Corporations. All Rights Reserved.23
Configuring security group options con’t

24. © 2017 Centrify Corporations. All Rights Reserved.24
Configuring security group options con’t

25. © 2017 Centrify Corporations. All Rights Reserved.25
Configuring security group options con’t

26. © 2017 Centrify Corporations. All Rights Reserved.26
Activating security policy changes

27. © 2017 Centrify Corporations. All Rights Reserved.27
Activating security policy changes

28. © 2017 Centrify Corporations. All Rights Reserved.28
Centrify Admin
Portal

29. © 2017 Centrify Corporations. All Rights Reserved.29
Adding Source

30. © 2017 Centrify Corporations. All Rights Reserved.30
Adding Source

31. © 2017 Centrify Corporations. All Rights Reserved.31
Adding Source

32. © 2017 Centrify Corporations. All Rights Reserved.32
Defining
provisioning rules

33. © 2017 Centrify Corporations. All Rights Reserved.33
Defining Provisioning rules

34. © 2017 Centrify Corporations. All Rights Reserved.34
Defining Provisioning rules

35. © 2017 Centrify Corporations. All Rights Reserved.35
Defining Provisioning rules

36. © 2017 Centrify Corporations. All Rights Reserved.36
Defining Provisioning rules

37. © 2017 Centrify Corporations. All Rights Reserved.37
Defining Provisioning rules

38. © 2017 Centrify Corporations. All Rights Reserved.38
Synchronizing
Data

39. © 2017 Centrify Corporations. All Rights Reserved.39
Synchronizing Data
§ Configuring manual syncs
§ Scheduling incremental syncs
§ Configuring sync reports

40. © 2017 Centrify Corporations. All Rights Reserved.40
Synchronizing Data

41. © 2017 Centrify Corporations. All Rights Reserved.41
Synchronizing Data

42. © 2017 Centrify Corporations. All Rights Reserved.42
Synchronizing Data

43. © 2017 Centrify Corporations. All Rights Reserved.43
Synchronizing Data

44. © 2017 Centrify Corporations. All Rights Reserved.44
Synchronizing Data

45. © 2017 Centrify Corporations. All Rights Reserved.45
Add Workday
SAML app

46. © 2017 Centrify Corporations. All Rights Reserved.46
Centrify Admin
Portal SAML app
configuration

47. © 2017 Centrify Corporations. All Rights Reserved.47
Workday requirements for SSO
Before you configure the Workday web application for SSO, you
need the following:
§ An active Workday account with administrator rights for your
organization.
§ A signed certificate.
You can either download one from Admin Portal or use your organization’s trusted certificate.

48. © 2017 Centrify Corporations. All Rights Reserved.48
Add Workday SAML app

49. © 2017 Centrify Corporations. All Rights Reserved.49
Add Workday SAML app

50. © 2017 Centrify Corporations. All Rights Reserved.50
Add Workday SAML app

51. © 2017 Centrify Corporations. All Rights Reserved.51
Add Workday SAML app

52. © 2017 Centrify Corporations. All Rights Reserved.52
Workday Portal
SAML app
configuration

53. © 2017 Centrify Corporations. All Rights Reserved.53
Configure Workday SSO

54. © 2017 Centrify Corporations. All Rights Reserved.54
Configure Workday SSO

55. © 2017 Centrify Corporations. All Rights Reserved.55
Configure Workday SSO

56. © 2017 Centrify Corporations. All Rights Reserved.56
Configure Workday SSO

57. © 2017 Centrify Corporations. All Rights Reserved.57
End user
Workday App
launch

58. © 2017 Centrify Corporations. All Rights Reserved.58
End user app launch

59. © 2017 Centrify Corporations. All Rights Reserved.59
End user app launch

60. © 2017 Centrify Corporations. All Rights Reserved.60
Syncing
Terminated
Workday Users

61. © 2017 Centrify Corporations. All Rights Reserved.61
Terminating Users

62. © 2017 Centrify Corporations. All Rights Reserved.62
Terminating Users

63. © 2017 Centrify Corporations. All Rights Reserved.63
Terminating Users

64. © 2017 Centrify Corporations. All Rights Reserved.64
Terminating Users

65. © 2017 Centrify Corporations. All Rights Reserved.65
Terminating Users

66. Q & A

67. © 2017 Centrify Corporations. All Rights Reserved.67
How to Submit a Question
Click on Q&A
Select “All Panelists” and
enter your question

68. © 2017 Centrify Corporations. All Rights Reserved.68
Thank You

69. © 2017 Centrify Corporations. All Rights Reserved.69
• Do I need to enable Workday SSO in order to configure Inbound
provisioning?
Answer: No. Configuring the Workday SSO application is separate from
configuring Inbound Provisioning. The Workday SSO application purpose is for
Workday administrators and end users to access the application. Inbound
Provisioning purpose is for pulling user data from the Workday portal.
Workday Questions

70. © 2017 Centrify Corporations. All Rights Reserved.70
• Will my Workday end users need a password to single sign on to the
Workday app?
Answer: No. The Workday application will be configured with SAML
authentication for single sign on, therefore the end user will not be prompted to
enter a password.
Workday Questions

71. © 2017 Centrify Corporations. All Rights Reserved.71
• My Connector is not configured with a domain administrator account. Where
do I store the domain administrative account?
Answer: At the Admin Portal, click on Settings > Users > Administrative
Accounts.
Workday Questions

72. © 2017 Centrify Corporations. All Rights Reserved.72
• Is it possible to sync our custom attributes?
Answer: Yes, when configuring the Provisioning source, there is an option called “Report
Integration” you can enable the option.
Note: Before you can configure Centrify to use custom attributes, you must first create the custom attributes in Workday.
Workday Questions

73. © 2017 Centrify Corporations. All Rights Reserved.73
• Is it is possible to integrate other HR application with Inbound Provisioning?
Answer: Yes, currently Centrify is in the process of integrating Bamboo HR for
Inbound Provisioning.
Workday Questions