Workday

Watch the tutorial

Workday Connector for Leena AI

The Workday connector for Leena AI allows you to index and search knowledge articles from your Workday tenant. This integration makes published help content easily discoverable across the organization, improving access to policies and internal guidance.

The connector focuses on ingesting knowledge articles and provides configuration options to ensure only relevant content is made searchable.


Prerequisites

Ensure the following details are available before proceeding:

  1. Integration System User (ISU) Credentials (Username & Password).
  2. Properly configured Integration System Security Group (ISSG).
  3. Necessary Domain Security Policies activated in Workday.

Workday Setup Guide

1. Create the Integration System User (ISU)

  • Search for the Create Integration System User (ISU) task.

  • Create a new ISU and securely record the Username and Password.

  • Confirm the ISU has default permissions assigned.

2. Create an Integration System Security Group (ISSG)

  • Search for Create Security Group.

  • Select Integration System Security Group (Unconstrained).

  • Name: ISSG_connector_leena_ai (or follow company naming conventions).

Add the below security domains to the created ISSG:

Add these functional areas and security domains to the ISSG for the API client that we are going to create in upcoming steps to configure the REST API for accessing the article web URL link.

OperationFunctional AreasAccess Level
Domain Security PolicyView Only
Generate: Benefit Plan Help ArticlesBenefitsView Only
View: Confidential Help CasesHelpView Only
Help Case DataHelpView Only
Set Up: Help Knowledge ManagementHelp, People ExperienceView Only
Help Case Internal NotesHelpView Only
Help Intelligent Answers AccessPeople ExperienceView Only
Help Case MessagesHelpView Only
Reports: Help Knowledge ManagementHelp, People ExperienceView Only
Set Up: Help Case ManagementHelpView Only
Manage: Help ArticlesHelp, People ExperienceView Only
Process: Help Cases / Help Case External ContactsHelpView Only
View: Help ArticlesHelp, People ExperienceGet Only
Generate: Benefit Plan Help ArticlesBenefitsGet Only
Set Up: Help Knowledge ManagementHelp, People ExperienceGet Only
Help Case Internal NotesHelpGet Only
Help Intelligent Answers AccessPeople ExperienceGet Only
Help Case MessagesHelpGet Only
Reports: Help Knowledge ManagementHelp, People ExperienceGet Only
Set Up: Help Case ManagementHelpGet Only
Process: Help Cases / Help Case External ContactsHelpGet Only
View: Confidential Help CasesHelpGet Only
Help Case DataHelpGet Only
Reports: Help Engagement MetricsHelpGet Only
Reports: Help Case ManagementHelpGet Only
Manage: Help ArticlesHelp, People ExperienceGet Only
View: Help ArticlesHelp, People ExperienceView Only
Help Article REST APIHelpGet Only
Help Article REST APIHelpView Only

3. Add ISU to ISSG

  • Run the All Workday Accounts report to find your ISU.

  • Select Assign Integration System Security Groups from the action menu.

  • Add the ISU to your newly created ISSG.

4. Configure Domain Security Policies

Access the ISSG via View Security Group and perform the following:

  • Select Maintain Domain Permissions for Security Group from the related actions menu.
  • Add the “Workday Accounts” permission to that ISSG.

Creating User-Based Security Group

  1. Search for the Create Security Group task.
  2. Type of Tenanted Security Group" is "User-Based Security Group" and enter your name of your security group.
  1. Go to related actions(3 dots) > Security Group > Maintain Domain Permissions for Security Group.
  1. Add below permissions.
  1. Run the Activate Pending Security Policy Changes task to apply the updates.
  • Knowledge Access: Search for Assign Users to User-Based Security Group, enter "User based security group"(which we created above)

  • Security Configuration: Add "Security Configuration" and "Security Activation" domains to your ISSG. Add the ISSG to both Report/Task Permissions and Integration Permissions.

  • Activation: Run the Activate Pending Security Policy Changes task to apply updates.


Register API Client for Leena AI Integration (Workday)

  1. In the Workday app, search for and select the Register API Client for Integrations task.
  1. Enter Leena AI API Client in the Client Name field.
  2. Under Scopes (Functional Areas), select:
    1. Benefits
    2. Help
    3. People Experience
  3. Click OK
  4. Copy and securely store the following credentials:
    1. Client ID
    2. Client Secret
  1. These will be required while configuring the integration in the Leena AI Admin Console.

Generate Refresh Token for Leena AI

  1. Click the three dots (… ) next to the newly created API client.
  2. Select:
    1. View API Client → Manage Refresh Tokens for Integration
  1. In the Integration System User (ISU) field:
    1. Select the ISU created in Step 1 of the setup.
  2. Click Generate New Refresh Token.
  3. Copy and securely store the Refresh Token.

Custom Report Configurations (RaaS)

You must create several reports. Ensure Enable as Web Service is checked for all.

Report 1: All Articles

  • Follow these steps to initialize the attachment-specific report required for the connector:

    1. Task: Navigate to the Create Custom Report task.
    2. Report Configuration: Enter the following header details:
    FieldValue
    Report NameAll Articles
    Report TypeAdvanced
    Data SourceKnowledge Base Article Versions

    🔍 Verification

    Ensure the following settings are correctly applied before proceeding to the columns:

    • Data Source Type: Indexed
    • Primary Business Object: Article Version

    In the columns tab map the following table in your report.

Business ObjectFieldColumn Heading Override XML Alias
Article VersionArticlearticleVersionArticle
Article VersionArticle Version Content Plain TextArticle_Version_Content_Plain_Text
Article VersionArticle Version Created ByarticleVersionCreatedBy
Article VersionArticle Version Created DatearticleVersionCreatedDate
Article VersionArticle Version AudiencesarticleVersionAudience
Article VersionArticle Version LanguagearticleVersionLanguage
ArticleWorkday IDworkdayID
Article VersionArticle Version AttachmentsarticleVersionAttachments
Article VersionArticle VersionArticle_Version
Article Version AttachmentsAttachmentAttachment
Article Version AttachmentsFile NamefileName
Article VersionArticle Status (REST)Article_Status__REST_
Article VersionArticle Version CategoryarticleVersionCategory
Article VersionArticle Version TitlearticleVersionTitle
Article VersionArticle Version Effective Expiration DateArticle_Version_Effective_Expiration_Date
Article VersionArticle Version Last Updated DatearticleUpdateDate
Article VersionArticle Version Last Updated DatearticleVersionLastUpdateDate
ArticleLast Functionally UpatedLast_Functionally_Updated
Article VersionArticle Version Effective Expiration DateArticle_Version_Effective_Expiration_Date_21626295
Article VersionWorkday IDworkdayID_version
  • Group Column Headings: Add the following info under group column heading.

  • Filter: In the Filter tab, add the following information.

Optional

  • For filtering articles based on metadata whether its “Category”, “Language”, “Expiry” or “Audience”.

  • Go to the filter tab, in the field add “category”, operator choose “in the selection list” and comparison type is “Value specified in this filter” and in comparison value choose the required category. Do the same for the rest of the metadata of articles. Note : Please choose the “AND” , “OR” filters as per your need.

    For example: in the image below, you can see how we added filters for the desired category.


  • Similarly do for other fields as per your requirement.

  • Prompts

    • Go to Prompts tab and add the prompts as mentioned below.


    Share

    • Go to Report Definition Sharing Options within **Share **Tab.

    • Select Share with authorised groups and Share.

    • Within Authorised User share add your ISU user that you created before.

    • Within Authorised Groups selected ISSG group that you created above.


  • Finalizing

    • Output Tab: Ensure the output type is set to table.

    • Click OK to save and then **Run **to verify the data.





Report 2: All Articles – Attachment

Follow these steps to configure the attachment-specific report for the Workday connector.

1. Initial Setup

  • Navigate to the Create Custom Report task in Workday.
  • Enter the following header details:
FieldValue
Report NameAll Articles – Attachment
Report TypeAdvanced
Data SourceKnowledge Base Article Versions

2. Verification

Before proceeding to columns, verify the following data source attributes:

  • Data Source Type: Indexed
  • Primary Business Object: Article Version

Next Step: Under columns tab, map the following table.

Business ObjectFieldColumn Heading Override XML Alias
Article VersionArticlearticleVersionArticle
Article VersionArticle Status (REST)Article_Status__REST_
Article VersionArticle Share AssignmentArticle_Share_Assignment
Article VersionArticle Version AudiencesarticleVersionAudience
Article VersionArticle Version LanguagearticleVersionLanguage
Article VersionArticle Version CategoryarticleVersionCategory
Article VersionArticle Version TitlearticleVersionTitle
Article Version AttachmentsAttachmentAttachment
Article Version AttachmentsFile NamefileName
Article Version AttachmentsActive Base64 Image DataactiveAttachmentContent
Article Version AttachmentsReference IDreferenceID
Article Version AttachmentsWorkday IDworkdayID_attachment
ArticleWorkday IDworkdayID
Article VersionCurrent Effective DateCurrent_Effective_Date
Article VersionArticle Version Last Updated ByarticleVersionLastUpdatedBy
Article Version AttachmentsContent TypecontentType
Article VersionArticle Version Created DatearticleVersionCreatedDate
Article VersionArticle Version Last Updated DatelastUpdateDate
Article VersionArticle Version Last Updated DatearticleVersionLastUpdatedDate
ArticleLast Functionally UpdatedLast_Functionally_Updated
Article VersionArticle Version Effective Expiration DateArticle_Version_Effective_Expiration_Date
  • Group Column Headings:

To maintain the correct data structure for the Workday connector, configure the following in the Group Column Headings section at the bottom of the Columns tab:

Business ObjectGroup Column Heading XML Alias
Article Version AttachmentsarticleVersionAttachments_group
ArticlearticleVersionArticle_group

  • Filters: Map the following information under Filters tab.

Optional

  • For filtering articles based on metadata whether its “Category”, “Language”, “Expiry” or “Audience”.
  • Go to the filter tab, in the field add “category”, operator choose “in the selection list” and comparison type is “Value specified in this filter” and in comparison value choose the required category. Do the same for the rest of the metadata of articles. Note : Please choose the “AND” , “OR” filters as per your need.
  • Sub-filters: File Name does not contain png, jpg, or gif.

  • Prompt

    • Go Prompts taband add the prompts as mentioned below.


  • Share

    • Go to Report Definition Sharing Options within ShareTab.
    • Select Share with authorised groups and Share.
    • Within Authorised User share add your ISU user that you created before.
    • Within Authorised Groups selected ISSG group that you created above.

  • Finalizing

    • Output Tab: Ensure the output type is set to table.
    • Click OK to save and then **Run **to verify the data.


Please note: The user can create audience via methods:

  1. Security groups
  2. Custom audience group

Report 3.1: CR_Security Group Members

Follow these steps to set up the security group membership report in Workday:

1. Task Initialization

  • Task: Search for and select Create Custom Report.

2. Report Details

Enter the following information in the header:

FieldValue
Report NameCR_Security Group Members
Report TypeAdvanced
Data SourceAll Workday Accounts
Report TagsSecurity

Next Step: List the Defining Report Columns and their corresponding XML Aliases for this security report.

Business ObjectFieldColumn Heading Override XML Alias
WorkerWorkerWorker
WorkerEmail - WorkEmail_-_Work
WorkerWorkday IDworkdayID
  • Group Column Headings: Set Business Object: Worker | XML Alias: Worker_group

  • Sort: On the Sort tab, ensure Sort by first accessible column is checked.

  • Filter: Add Security Groups field as shown below.

  • Sub-filter: Within the Subfilter tab, select Security Groups as the Business Object and add the condition: Security Group Name | contains | Prompt the user for the value.


  • Prompts and Output

    • Configure the following settings to ensure the report handles parameters and data display correctly:

      1. Prompts

      • Date Settings: Set both Effective Date and Entry Date to Use date and time at runtime.
      • Display Settings: Enable the checkbox for Display Prompt Values in Subtitle.
      • Prompt Defaults: Add the following default configuration:
      FieldPrompt QualifierXML Alias
      Security Group NameDefault PromptSecurity_Group_Name

      2. Output

      • Navigate to the Output tab.
      • Output Type: Select Table.
  • Report Sharing Configuration

    To ensure Leena AI can access the generated data, configure the security settings as follows:

    1. Navigate to the Share tab.

    2. Select the radio button: Share with specific authorized groups and users.

    3. In the Authorized Users field, add: leena-km-connector.

    4. Click OK to save and finalize the report.



    Report 3.2: Custom Audience Report

    Phase 1: Build Individual Audience Calculated Fields

    Step 1.1 — Navigate to Calculated Field Creation

    • In the Workday search bar, type Create Calculated Field and select the task
    • Ensure you have the required security domain: Manage: Calculated Fields

    Step 1.2 — Create the First Audience Field (Audience A)

    Fill in the Create Calculated Field form:

    • Field Name: CF_Audience_A_Leena
    • Business Object: Worker
    • Function: True/False Condition

    Click OK to proceed to the field configuration page.



    Step 1.3 — Define the Conditional Rules for Audience A

    In the True/False Condition editor, configure rules using AND logic:

    OrderFieldOperatorValue
    1Primary Work Location → Countryequal toIndia
    2Job Familyequal toEngineering
    3Hire Dategreater than or equal to01/01/2023
    4Active Statusequal toYes
    • Set the And/Or connector to AND between all rules
    • Save the field

    Workday will validate that the field returns Yes/No per worker.

    Repeat the same process for all custom audience groups (Audience B, C, etc.) with their respective rules.


    Phase 2: Build the Master Report

    Step 2.1 — Create the Advanced Report

    • Search for Create Custom Report in Workday

    • Fill in the following details:

      • Report Name: RPT_Custom_Audience_Workers_Consolidated
      • Report Type: Advanced
      • Data Source: All Workers
        (or use All Active Employees if only active workers are required)
      • Business Object: Auto-populates to Worker

    Click OK.


    Step 2.2 — Add Columns

    Go to the Columns tab and add the following fields in order:

    1. Employee ID
    2. Worker (Name)
    3. Primary Work Email
    4. CF_Audience_A_Leena
    5. CF_Audience_B_Leena
    6. CF_Audience_C_Leena
    7. (Continue adding additional audience fields as needed)

And then share the report with the ISU and ISSG created above



This structure ensures a single consolidated report showing which workers belong to which audience segments via calculated fields.

Fetching API URLs

  1. Search for View Custom Report.

  2. Navigate to Web Service > View URLs.

  3. Right-click JSON and select Copy URL.

To verify weather reports are correct or not:

Copy JSON API url(which we get above), and paste in incognito then enter isu username and password, then json file being downloaded in your system and if the data is correct in json, then report is correct.

Required Report names for Integration:

  • All Article report
  • All Article Attachment report
  • CR_Security Group report


Leena AI Configuration

  1. Go to the Knowledge Management Dashboard.
  2. Navigate to Settings > Integrations > Workday Connector.
  3. Click Connect and enter:
  • ISU Username & Password
  • Base_url":
  • Tenant ID
  • The names of 3 RaaS Reports
  • Client ID, Client Secret and Refresh Token
  1. Set to Manual Sync or Auto Sync.