How to add Workday to Dropbox Dash

Add Workday to Dropbox Dash to turn on your company directory. Once added, employees will have detailed, searchable profiles featuring their role, email, location, time zone, and more. Workday team structures are also imported, powering an interactive org chart that reflects your real organization—directly in Dash.

API permissions

When adding Workday to Dropbox Dash, Dash requests the following authorizations:

• Worker Data
  • Current staffing information: This domain provides information on workers' current information such as status, length of service, and seniority.
  • Active and terminated workers: This domain provides access to reporting fields and data sources that include terminated workers.
  • Workers: This domain secures access to workers on the Get Workers web service.
  • Public worker reports: This domain provides access to information all workers can access about all other workers, including web services.
  • Service dates: This domain provides access to view any worker's service dates.
  • Leave of absence: This domain provides functionality related to viewing Leave of Absence information for workers.
  • Time off: This domain provides functionality related to viewing Accrual and Time Off Adjustments/Overrides for workers, and viewing time offs and balances for workers.
  • Time off (Time Off): This domain provides functionality related to viewing time offs for workers.
  • Business title on worker profile: This domain provides access to viewing a worker's business title in the context of the worker profile.
• Person Data
  • Work address: This domain provides access to the work addresses of people.
  • Name: This domain provides access to the names of people.
  • Date of birth: This domain provides access to the date of birth of people.
  • Home address: This domain provides access to the home addresses of people.
• Reports
  • Management: This domain provides the ability to view workers for a manager's various forms of management relationships, including supervisory manager, matrix manager, and team leader.
  • Organization: This domain provides access to view organizations. All users will have access to view organizations based on the security permissions granted to organization items and the visibility setting on each organization.
• View
  • Supervisory organization: This domain provides the ability to view information for supervisory organizations to which the user has access.
• Process
  • Time tracking: This domain provides access to viewing a worker's time clock events.

Integration features

By adding Workday to Dash, Dash will have access to the following fields and display them within your employees’ profiles on Dash:

• Full name
• Email
• Type (full-time or contingent)
• Role (business title)
• Location (work location)
• Manager name
• Hire date (tenure)
• Time zone
• On leave status
• Deactivated status
• Team name

Private fields users can choose to share in their profile:

• Birthday
• City (personal location)
• Upcoming PTO

Overview of setup

To add Workday to Dash, complete the following steps:

• Step 1: Register a new API client in Workday
• Step 2: Create an integration system user (ISU) in Workday
• Step 3: Create a security group, add permissions, and activate the security policy changes
• Step 4: Add Workday to Dash

Step 1: Register a new API client in Workday

1. Log in to Workday as an admin.
2. Enter “Register API Client” in the search bar.
3. Click Register API Client to create a task.
4. Enter Dropbox Dash as your Client Name.
5. Select Authorization Code Grant.
6. Check the Enforce 60 Minute Access Token Expiry box.
7. Make sure the Access Token Type is Bearer.
8. Enter the following Redirect URl: https://www.dropbox.com/oauth_connectors/redirect
9. Make sure the Refresh Token Timeout (in days) is set to 30.
10. Add the following permissions in the Scope (Functional Areas):
    • Contact Information
    • Organization and Roles
    • Staffing
    • Time Off and Leave
    • Time Tracking
11. Click OK.
12. On the next screen, securely save the following details as you’ll need them for Step 4: Add Workday to Dash.
    • Client ID
    • Client Secret
    • Workday REST API Endpoint URL
    • Token URL
    • Tenant ID

Step 2: Create an integration system user (ISU) in Workday

Workday recommends creating an ISU to act as a service account for integrations. To set it up:

1. Log in to Workday as an admin.
2. Enter “Register API Client” in the search bar.
3. Click Register API Client to create a task.
4. Enter a username.
   • Note: In these instructions, the account name is “Dash_ISU”.
5. Create a new password.
6. Click OK, then click Done.

 

Step 3: Create a security group, add permissions, and activate the security policy changes

1. Log in to Workday as an admin.
2. Enter “Create security group” in the search bar.
3. Click Create Security Group to create a task.
4. Click the dropdown next to Type of Tenanted Security Group, then select Integration System Security Group (Unconstrained).
5. Enter a name.
   • Note: In these instructions, the name is “Dash_ISU_SG”.
6. Click OK.
7. Under Integration System Users, search for and select Dash_ISU.
8. Click ①(Related Actions) next to the security group name, then click Security Group.
9. Select Maintain Domain Permissions for Security Group.
10. In the blank field next to Domain security policies permitting View and Get access, add the following permissions:
    • Worker Data: Current Staffing Information
    • Worker Data: Active and Terminated Workers
    • Person Data: Work Address
    • Worker Data: Workers
    • Worker Data: Public Worker Reports
    • Reports: Management
    • Worker Data: Service Dates
    • Worker Data: Leave of Absence
    • View: Supervisory Organization
    • Worker Data: Time Off
    • Worker Data: Time Off (Time Off)
    • Reports: Organization
    • Person Data:  Name
    • Person Data: Date of Birth
    • Process: Time Tracking
    • Worker Data: Business Title on Worker Profile
    • Person Data: Home Address
11. Click OK.
12. Enter “Activate Pending Security Policy Changes” in the search bar.
13. Click Activate Pending Security Policy Changes to create a task.
14. Enter a comment to describe the security changes to be published.
15. Click OK.
16. Review the data, then check the Confirm box and click OK.

Step 4: Add Workday to Dash

1. Log in to dash.ai using your admin credentials.
2. Click your avatar (profile picture or initials) in the lower left.
3. Select Admin console.
4. Click Dash in the left sidebar.
5. Click Apps.
6. Click the More apps tab.
7. Click Add to the right of Workday.
8. Review the What to expect prompt, then click Next.
9. Enter the following info under Copy app info from Workday:
   • Client ID
   • Client Secret
   • Workday REST API Endpoint URL
10. Click Next.
11. Enter the following info under Copy authentication info:
    • Authorization URL
    • Token URL
    • Tenant ID
12. Click Next.
13. In the pop-up window, click Allow to authorize Workday.
14. Click Done.