Workday SAM Pro Integration - Data Brought In

[Cairns]

Hi all,

Looking for some insight from anyone that has set up the Workday/Sam Pro integration. We are in the process of currently setting it up and have been asked by the Workday teams what information/fields are fetched from Workday. With the integration accessing worker data they are interested as to what, if any, sensitive info will be fetched. The documentation about setting up the integration doesn't really specify what data is ingested into the Sam Pro system and I am struggling to find much more about it.

Has anyone set up or, is in the process of setting this up, and could share what type of data is being brought into the system?

We are now looking to see if we can interrogate the the sub-flows to see if this mentions anything specific but wanted to put this out the community as well.

Any information or advice is greatly appreciated.

Thanks in advance,
Cairns

[Matthew_13 · Accepted solution]

Hi Buddy,

We’ve been through this discussion as well, and the short answer you can give the Workday team is: SAM Pro only pulls basic worker identity and employment data — nothing sensitive.

Out of the box, the Workday → SAM Pro integration is used strictly for license management and reconciliation, so it only brings in data needed to identify a worker and understand whether they should have software entitlements.

Typically, that means things like:

• Worker / Employee ID

• Name

• Work email

• Employment status (active / terminated)

• Worker type (employee vs contingent)

• Hire and termination dates

• Org, cost center, or supervisory org

• Business location

It does not pull compensation, SSN/national IDs, DOB, home address, bank details, benefits, performance data, or anything HR-sensitive.

The reason the docs feel vague is that the integration uses standard Workday worker APIs, and ServiceNow only consumes the fields it needs from whatever the Workday team exposes. If Workday doesn’t send it, ServiceNow can’t ingest it.

The best way to be 100% certain (and usually what satisfies HR) is to open the worker import subflows / mappings and show exactly which fields are being mapped into sys_user. That’s the authoritative list.

Unless someone customizes the integration or expands the API scope, the data footprint stays intentionally minimal.

@Cairns - Please mark Accepted Solution and Thumbs Up if you found Helpful

[Cairns]

Hi @Matthew_13 ,

Thank you for this, this is exactly the type of information that I was looking for. A colleague of mine has been looking at the sub-flows and, exactly as you've said, all the data that will be ingested is clearly listed. Between the answer you've provided and the data in the sub-flows, I'm sure that will be enough to satisfy the Workday teams questions.

Thank you again.

Regards,

Cairns