Workday Integration with ServiceNow – Access Issues with Integration User

[SyedMulthazim]

Hi All,

We are currently working on integrating our Workday system with ServiceNow to track software subscriptions. As part of the setup, we created an integration user in Workday and assigned domain security access based on the roles and permissions mentioned in the ServiceNow documentation.

However, we encountered an issue where the records were not being pulled into the ServiceNow instance.

To troubleshoot, our Workday team temporarily granted additional access to the integration user, and with that elevated access, the records were successfully pulled into ServiceNow. The corresponding subflow ran for about 30 minutes. However, the Workday team raised concerns that the additional access is too broad and causes too much data to be sent to ServiceNow.

Given this situation, we are wondering:

Are there any specific roles or security settings (beyond what’s outlined in the ServiceNow documentation) that must be assigned to the Workday integration user to allow the required data to flow—without over-permissioning and overwhelming the system?

We would appreciate any insights or best practices from those who have successfully implemented a similar integration.

Thanks in advance!

#software asset management #workday integration

[GlideFather]

Hi @SyedMulthazim 

there are almost no details about your integration.

Do you use rest or what exactly?

Staging table exists?

How do you transform the data?

Is it one or both directions?

Do you have endpoints?

Error in WD or SN side?

please tell us a bit more about it

[SyedMulthazim]

Hi @GlideFather 

ServiceNow Docs: Integrating with Workday

We are using the above mentioned out of the box plugin.

Please let me know if you need more details.

[AJ5]

Hi @SyedMulthazim ,
Thanks for sharing this. We are also encountering a similar issue. What additional access did you grant in Workday?
Also, is there a way to verify the authentication? The documentation seems a bit outdated. I haven't been able to validate the connection either. 

[SyedMulthazim]

Hi @AJ5 

I was able to get through this issue by providing additional Domain policy access in Workday - (Worker Data: Workers).

To check if your connection is successful, navigate to the table (sys_outbound_http_log) and filter the URL column (not the URL Hostname) using the following format: https://<workday_host_url>/ccx/service/<workday_tenant_name>. Once you open the record, verify the response received, ensuring that the status code is 200.

If you require further information, please don't hesitate to let me know.

Also, if you found my response helpful in resolving your issue, kindly mark it as such.