Integrate the ServiceNow instance Workday instance by using the WS-Security Username Profile to authenticate ServiceNow requests.

Before you begin

  • Request an Integration Hub subscription.
  • Activate the Workday Financials spoke.
  • Role required: admin

Provide the Workday Financials base URL

Provide the base URL of your Workday Financials instance in the Connection Details [connection_details] table. Spoke actions based on the SOAP API, use these details for the action execution.

Before you begin

Role required: admin.

Procedure

  1. Navigate to All > System Definition > Tables.
  2. Filter and search for the Connection Details table.
  3. Click the Show List related list.
  4. Click New.
  5. On the form, fill these values.
    Table 1. Connection Details form
    Field Description
    Base URL Base URL of the Workday instance or tenant name.
    Version Version of the API. For example, enter v33.2.
  6. Click Save.

Create a WS-Security Username Profile for the Workday Financials spoke

Create a WS-Security Username Profile to provide your Workday credentials to authenticate requests from ServiceNow.

Before you begin

Role required: admin.

Procedure

  1. Navigate to All > IntegrationHub > SOAP Integrations > WS-Security Username Profiles.
  2. Click New.
  3. On the form, fill these values.
    FieldDescription
    Name Name to uniquely identify this credential. For example, enter WorkdayFinancials User.
    Application Application in which the record is applicable. Select Workday Financials Spoke.
    Username Workday user who has integration rights using Workday Web Services.
    Password Password of the Workday user.
  4. Click Save.

Configure the SOAP security policy for the Workday Financials spoke

Configure the SOAP security profile by adding the security user name profile you had created to authenticate requests from ServiceNow.

Before you begin

Role required: admin.

Procedure

  1. Navigate to All > IntegrationHub > SOAP Integrations > SOAP Security Policies.
  2. Open the record, WorkdayFinancials.
  3. For WS-Security Username Profile, select the security username profile you had created for the Workday Financials spoke.
    See Create a WS-Security Username Profile for the Workday Financials spoke for more information.
  4. Do not provide value in WS-Security X.509 Profile.
  5. Right-click the form header and click Save.

Generate client ID and client secret for Workday Financials spoke

Register Workday Financial spoke as the API client in your Workday account and generate client ID, client secret.

Before you begin

Role required: admin

Procedure

  1. Log into your Workday tenant.
  2. Navigate to Search and enter Register API Client for Integrations task. Search for Register API client for integrations in Workday account
  3. On the Register API Client for Integrations form, fill in the details.
    FieldDescription
    Client Name Client name of the app. For example, enter Workday Financials spoke.
    Non-expiring Refresh Tokens Option to enable refresh tokens that do not expire.
    Scope (Functional Areas) Select the required functional areas.
    Include Workday Owned Scope Option to select Workday owned scope.
    Fields in Register API Client for integrations screen
  4. Click OK.
    Client ID and Client Secret are generated after the registration is successful.Client ID and client secret generated after API client registration
  5. Click the ellipsis button after the specified client name.Navigating Manage Refresh Tokens for Integrations option
  6. Select API Client >Manage Refresh Tokens for Integrations.
  7. Select your Workday Account and click OK.
    Delete or Regenerate Refresh Token screen displays.
  8. Select Generate New Refresh Token option and click OK.Refresh token generated in Workday account

Result

A new refresh token is generated. Copy and store the refresh token for configuring system property.

Generate token URL for Workday Financials spoke

Register API client in your Workday account and generate a token URL for Workday Financials spoke.

Before you begin

Role required: admin

Procedure

  1. Log into your Workday tenant.
  2. Navigate to Search and enter Register API Client task.
  3. On the Register API Client, fill in the details.
    FieldDescription
    Client Name Client name of the app. For example, Workday Financials spoke.
    Client Grant Type Select Authorisation Code Grant.
    Access Token Type Access Token Type: Select Bearer
    Redirection URI Enter your ServiceNow URL in this format: https://<instance>.service-now.com/oauth_redirect.do.
    Non-Expiring Refresh tokens Option to enable refresh tokens which do not expire.
    Scope (Functional Areas) Select the required functional areas.
    Include Workday Owned Scope Option to select scope that are owned by Workday.
  4. Click OK.

Result

Copy and store the generated Token Endpoint value for configuring system property.

Configure system properties for Workday Financials spoke

Configure the system properties to enable OAuth for SOAP APIs based actions for Workday Financials spoke.

Before you begin

Procedure

  1. Navigate to All > System Properties > All Properties.
  2. In the Application column, search for Workday Financials Spoke.
  3. Open the sn_workdayfin_spke.glide.hub.clientid system property.
  4. Enter the Client ID generated from the Workday account in the Value field and click Update.
  5. Open the sn_workdayfin_spke.glide.hub.clientsecret system property.
  6. Enter the Client secret generated from the Workday account in the Value field and click Update.
  7. Open the sn_workdayfin.glide.hub.refreshtoken system property.
  8. Enter the refresh token generated from the Workday account in the Value field and click Update.
  9. Open the sn_workdayfin_spke.glide.hub.tokenurl system property.
  10. Enter the token URL generated from the Workday account in the Value field and click Update.

Result

The required system properties are configured for the Workday Financials spoke.