Set up the Workday Financials spoke

Integrate the ServiceNow instance Workday instance by using the WS-Security Username Profile to authenticate ServiceNow requests.

Before you begin

• Request an Integration Hub subscription.
• Activate Workday Financials spoke.
• Role required: admin

Provide the Workday Financials base URL

Provide the base URL of your Workday Financials instance in the Connection Details [connection_details] table. Spoke actions based on the SOAP API, use these details for the action execution.

Before you begin

Role required: admin.

Procedure

1. Navigate to All > System Definition > Tables.
2. Filter and search for the Connection Details table.
3. Click the Show List related list.
4. Click New.
5. On the form, fill these values.

   Table 1. Connection Details form

   Field	Description
   Base URL	Base URL of the Workday instance or tenant name.
   Version	Version of the API. For example, enter v33.2.

6. Click Save.

Create a WS-Security Username Profile for the Workday Financials spoke

Create a WS-Security Username Profile to provide your Workday credentials to authenticate requests from ServiceNow.

Before you begin

Role required: admin.

Procedure

1. Navigate to All > IntegrationHub > SOAP Integrations > WS-Security Username Profiles.
2. Click New.
3. On the form, fill these values.

   Field	Description
   Name	Name to uniquely identify this credential. For example, enter WorkdayFinancials User.
   Application	Application in which the record is applicable. Select Workday Financials Spoke.
   Username	Workday user who has integration rights using Workday Web Services.
   Password	Password of the Workday user.

4. Click Save.

Configure the SOAP security policy for the Workday Financials spoke

Configure the SOAP security profile by adding the security user name profile you had created to authenticate requests from ServiceNow.

Before you begin

Role required: admin.

Procedure

1. Navigate to All > IntegrationHub > SOAP Integrations > SOAP Security Policies.
2. Open the record, WorkdayFinancials.
3. For WS-Security Username Profile, select the security username profile you had created for the Workday Financials spoke.
   See Create a WS-Security Username Profile for the Workday Financials spoke for more information.
4. Do not provide value in WS-Security X.509 Profile.
5. Right-click the form header and click Save.

Generate client ID and client secret for Workday Financials spoke

Register Workday Financial spoke as the API client in your Workday account and generate client ID, client secret.

Before you begin

Role required: admin

Procedure

1. Log into your Workday tenant.
2. Navigate to Search and enter Register API Client for Integrations task.
3. On the Register API Client for Integrations form, fill in the details.

   Field	Description
   Client Name	Client name of the app. For example, enter Workday Financials spoke.
   Non-expiring Refresh Tokens	Option to enable refresh tokens that do not expire.
   Scope (Functional Areas)	Select the required functional areas.
   Include Workday Owned Scope	Option to select Workday owned scope.

   
4. Click OK.
   Client ID and Client Secret are generated after the registration is successful.
5. Click the ellipsis button after the specified client name.
6. Select API Client >Manage Refresh Tokens for Integrations.
7. Select your Workday Account and click OK.
   Delete or Regenerate Refresh Token screen displays.
8. Select Generate New Refresh Token option and click OK.

Result

A new refresh token is generated. Copy and store the refresh token for configuring system property.

Generate token URL for Workday Financials spoke

Register API client in your Workday account and generate a token URL for Workday Financials spoke.

Before you begin

Role required: admin

Procedure

1. Log into your Workday tenant.
2. Navigate to Search and enter Register API Client task.
3. On the Register API Client, fill in the details.

   Field	Description
   Client Name	Client name of the app. For example, Workday Financials spoke.
   Client Grant Type	Select Authorisation Code Grant.
   Access Token Type	Access Token Type: Select Bearer
   Redirection URI	Enter your ServiceNow URL in this format: https://<instance>.service-now.com/oauth_redirect.do.
   Non-Expiring Refresh tokens	Option to enable refresh tokens which do not expire.
   Scope (Functional Areas)	Select the required functional areas.
   Include Workday Owned Scope	Option to select scope that are owned by Workday.

4. Click OK.

Result

Copy and store the generated Token Endpoint value for configuring system property.

Configure system properties for Workday Financials spoke

Configure the system properties to enable OAuth for SOAP APIs based actions for Workday Financials spoke.

Before you begin

• Generate client ID and client secret for Workday Financials spoke
• Generate token URL for Workday Financials spoke
• Role required: admin

Procedure

1. Navigate to All > System Properties > All Properties.
2. In the Application column, search for Workday Financials Spoke.
3. Open the sn_workdayfin_spke.glide.hub.clientid system property.
4. Enter the Client ID generated from the Workday account in the Value field and click Update.
5. Open the sn_workdayfin_spke.glide.hub.clientsecret system property.
6. Enter the Client secret generated from the Workday account in the Value field and click Update.
7. Open the sn_workdayfin.glide.hub.refreshtoken system property.
8. Enter the refresh token generated from the Workday account in the Value field and click Update.
9. Open the sn_workdayfin_spke.glide.hub.tokenurl system property.
10. Enter the token URL generated from the Workday account in the Value field and click Update.

Result

The required system properties are configured for the Workday Financials spoke.