Authorize Workday

Ensure your UI will display the candidate ID #

In order to use the Cronofy Browser Extension with Workday we will need to be able to determine the Candidate ID and Job Requisition IDs from the Workday app. Some tenants may be configured to hide these by default, so you will need to ensure they have been enabled to be displayed.

1. Search for and open the “Edit Tenant Setup - HCM” task in Workday.
2. Ensure the “Include ID in Candidate Name” checkbox is ticked.
3. Click “OK” and save changes if you had to enable the setting.

Create an Integration System User #

You will need to create an Integration System User which Cronofy can use to communicate with your Workday tenant.

1. Search for and open the “Create Integration System User” task in Workday.
2. Specify a username, e.g. “ISU_Cronofy”.
3. Enter a password.
4. Uncheck the “Require New Password at Next Sign In” checkbox.
5. Ensure the “Do Not Allow UI Sessions” checkbox is ticked.
6. Click “OK” to create the new Integration System User.

Depending on your tenant settings you may also need to exempt this user from password expiration:

1. Search for and open the “Maintain Password Rules” task in Workday.
2. Add the Integration System User you configured above to the “System Users exempt from password expiration” list.
3. Click “OK” to save changes.

Create and configure a Security Group #

Next you will need to create a Security Group which will grant the Integration System User access to the required APIs.

1. Search for and open the “Create Security Group” task in Workday.
2. Specify the type of “User-Based Security Group”. (Note that this type is required to later configure the Business Process Security Policies).
3. Specify a name for the Security Group, for example “Cronofy Security Group”.
4. Click “OK” to create the new Security Group.
5. Click on the action button (...) next to the security group you just created, and select “User-Based Security Group”, then “Assign Users”.
6. Select the Integration System User you created previously.
7. Click “OK” to assign the Integration System User to the Security Group.
8. Click “Done” to finish.

You will then need to configure the new Security Group to grant a number of permissions required by Cronofy to access and update candidate job applications.

1. Search for and open the “Maintain Permissions for Security Group” task in Workday
2. Select the “Maintain” operation if required.
3. Select the Security Group you created above as the “Source Security Group”.
4. Click “OK”.
5. You will then need to add the following GET and PUT operations under “Domain Security Policy Permissions”.

6. Click “OK” to save the Security Group.

Configure your Business Process Security Policies #

Once the Security Group has been configured you can then update your Business Process Security Policies to allow the Integration Security Group created earlier to update the progress of interviews.

1. Search for and open the “Edit Business Process Security Policy” task.
2. Select the “Interview” business process.
3. Find the “Who Can Do Action Steps in the Business Process” option and add the Security Group created previously to the “Manage Interview Feedback”, “Schedule Interview”, and “Schedule Interview Team” steps.

You will then need to perform similar steps for the job application business process:

1. Search for and open the “Edit Business Process Security Policy” task.
2. Select the “Job Application” business process.
3. Find the “Who Can Do Action Steps in the Business Process” option and add the Security Group created previously to the “Interview” step.

Note that you may then need to enable these changes above using the “Activate Pending Security Policy Changes” task for them to take effect within your tenant.

Configure the Business Process #

You will then need to edit the “Interview” Business Process Definition to allow the Integration Service User to push changes to candidate interviews.

1. Search for and open the “Business Process Definition for Interview”
2. Click on the action button (...) and select “Business Process” then “Edit Definition”.
3. Click “OK”.
4. Add the security group created previously to the “Group” column on the steps “Schedule Interview” and “Manage Interview Feedback”.
5. Click “OK”.
6. Click “Done” to save changes.

Find your API host URL #

Cronofy will need to access your Workday tenant. Depending on how your tenant was setup, and where it is hosted this may mean Cronofy will need to contact a different Web Services endpoint. In preparation for configuring Cronofy you will need to find this endpoint.

1. Search for and find the “Public Web Services” report.
2. Find either the “Human Resources” or “Recruiting” Web Service. Note that either is fine, they will both result in the same address.
3. Click the actions (...) button, select “Web Service” and “View WSDL”.
4. You will be presented with an XML document. Search for soapbind:address location=
5. Copy the host name ready for the next step. This will look something like impl-services1.wd123.myworkday.com or wd1-impl-services1.workday.com. Note that the https:// and directory paths are not required.

Configure Cronofy #

Next you will need to configure Cronofy to connect to your Workday tenant. Before you do this you will need to reach out to our support team to have Workday enabled for your Organization.

1. Navigate to the Cronofy dashboard.
2. Select your Organizational Unit on the menu and select the “Admin” tab, followed by “Integrations”.
3. Click “Set Up New Integration” and pick “Workday”.
4. Enter the API host you found in the previous step, your tenant ID, the Integration System User username, and password.
5. Click “Save.

At this point you can now use the Cronofy Browser Extension to Schedule interviews using Workday and Cronofy.