Connect Workday to Anzenna
Integrate Anzenna with Workday to correlate security events with employee lifecycle data, organizational structure, and workforce information.
Prerequisites
Workday administrator access (Integration System Security Group permissions)
- Anzenna account
Ability to create Integration System Users in Workday
Permissions to create security groups and assign permissions
Overview
The integration provides:
Employee directory and organizational structure
User lifecycle tracking (hires, terminations, transfers)
- Department and location information
- Manager relationships
- Custom worker attributes
Step-by-Step Instructions
Part 1: Enable Integration in Anzenna
Log into Anzenna at
app.anzenna.ai/u/integrations
Find the Workday integration card
Toggle to activate the Workday enrollment option
Part 2: Create Integration System User
Log into Workday as administrator
- In the search bar (Workbench), type:
Create Integration System User
- Select the task from results
Enter user credentials:
- Username:
anzenna Password: Generate strong password
- Username:
Copy and save the password immediately. You'll need it to complete the Anzenna connection.
Click OK to create the user
Part 3: Create Security Group
In Workday Workbench, search for:
Create Security Group
- Select the task
Choose Integration System Security Group (Unconstrained)
Enter security group details:
- Name:
anzenna - Description:
Security group for Anzenna integration
- Name:
Under Integration System User, add the
anzennauser you createdClick OK to create the security group
Part 4: Assign Permissions
In Workbench, search for:
Maintain Permissions for Security Group
Select the
anzennasecurity groupGrant Get Only access to the following:
Worker Data:
- Worker Data: User Profile
- Worker Data: Public Worker Reports
- Worker Data: All Positions
- Worker Data: Organizations
Learning and Development:
- Learning Records
Staffing:
- Staffing
Organizational Data:
- Integration Data
- Person Data
Reports:
- Report: Data Source for Custom Reports
- Report: Worker
Click OK to save permissions
Part 5: Activate Security Policy Changes
In Workbench, search for:
Activate Pending Security Policy Changes
- Select the task
- Review pending changes
Enter a comment (e.g., "Activating Anzenna integration permissions")
Click OK to activate
Security policy changes typically activate immediately but may take a few minutes to propagate.
Part 6: Create RaaS Report
In Workbench, search for:
Create Custom Report
Select Advanced report type
Enter report details:
- Report Name:
Anzenna Sync - Report Type:
Advanced
- Report Name:
Add the following data fields (in order):
- user_id
- first_name
- last_name
- preferred_name
- org_name
- department
- location
- job_title
- manager_name
- manager_email
- hire_date
- termination_date
- employee_status
- employee_type
- cost_center
- business_unit
- custom_field_1 (if applicable)
Configure report settings:
- Enable As Web Service: Yes
- Optimized for Performance: Yes
Under Share, assign ownership to the
anzennaintegration system userClick OK to create the report
Part 7: Complete Connection in Anzenna
Return to Anzenna > Integrations > Workday
Enter your Workday Tenant ID
Format: Your tenant name (e.g.,
acme,company)Enter Username:
anzenna
- Paste the password you created in Step 2
Click Save to establish the connection
Verify integration shows as Connected
Verification
Check integration status shows Connected
- Wait 30 minutes for initial sync
Navigate to Anzenna's Users dashboard
Verify employee data from Workday is appearing
- Check organizational structure is visible
What Data is Collected
Employee Information
- Employee IDs
- Names (first, last, preferred)
- Email addresses
- Phone numbers
- Employment status
Organizational Data
- Departments
- Locations
- Business units
- Cost centers
- Organizational hierarchy
Job Information
- Job titles
- Positions
- Manager relationships
- Supervisory structure
- Employment type
Lifecycle Events
- Hire dates
- Termination dates
- Transfer history
- Promotion records
- Status changes
Custom Fields
- Organization-specific attributes
- Extension fields
- Custom worker data
Use Cases
User Attribution
Correlate security events with:
- Employee department
- Manager information
- Location data
- Employment status
Insider Threat Detection
- Activity during notice period
- Post-termination access
- Transfer to competitor
- Performance issues correlation
Access Management
- Onboarding automation
- Offboarding workflows
- Role changes
- Org structure changes
Troubleshooting
Connection Fails
- Verify Tenant ID is correct
Check username is exactly
anzenna- Ensure password was copied correctly
- Confirm security group is activated
Integration System User Errors
- Verify user was created successfully
- Check user hasn't been disabled
- Ensure password meets Workday requirements
- Confirm user has security group membership
Permission Errors
Review all Get Only permissions were granted
Verify security policy changes were activated
- Check security group configuration
- Ensure no conflicting security policies
No Data Syncing
- Wait 30-60 minutes for initial sync
- Verify RaaS report was created
Check report is assigned to
anzennauser- Ensure report has web service enabled
- Review Workday audit logs
RaaS Report Issues
- Verify all 18 fields are included
- Check field names match exactly
- Ensure report is optimized for performance
- Confirm web service is enabled
Security Considerations
Integration System User - Service account isolation
Read-only access - Get Only permissions
Security group isolation - Dedicated security group
Audit logging - All access logged in Workday
Password security - Strong password requirements
Best Practices
Service account — Dedicated integration user
Minimal permissions — Only Get Only access
Document password — Store in secure vault
Regular audits — Review permissions quarterly
Monitor initially — Check sync errors in first week
Update RaaS report — Add custom fields as needed
Test thoroughly — Verify data accuracy
Integration Maintenance
Regular Checks
Perform monthly:
- Verify connection active
- Check data freshness
- Review sync timestamps
- Validate employee counts
Security Group Audits
Quarterly review:
- Verify permissions unchanged
- Check security group membership
- Review access logs
- Ensure compliance with policies
RaaS Report Updates
When adding custom fields:
- Edit Anzenna Sync report
- Add new fields
- Update data source
- Test report output
- Sync updates to Anzenna
Password Rotation
If rotating integration password:
- Update password in Workday
- Update in Anzenna immediately
- Test connection
- Document change
Workday Editions
The integration works with:
- Workday HCM
- Workday Enterprise Management Cloud
Requires appropriate licensing for API access and RaaS reporting.
RaaS (Reporting as a Service)
Workday's RaaS enables:
- Custom report creation
- Web service exposure
- Automated data extraction
- API-based report access
The Anzenna Sync report uses RaaS for data synchronization.
Related Resources
Need help? Contact
Anzenna Support
for assistance.