# Prerequisites for creating a connection to Workday

> This page lists all the prerequisite steps for creating a connection between Integration Service
and Workday.

This page lists all the prerequisite steps for creating a connection between Integration Service
and Workday.

## Create an Integration System User (ISU)

1. In the Workday portal, log in to your Workday tenant.
2. In the search bar, type **Create Integration System User**.
3. Select the **Create Integration System User** task.
4. On the **Create Integration System User** page, in the **Account
   Information** section, enter a user name and set a password. Select
   **OK**.

   ![The Create Integration System User page in Workday](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-the-create-integration-system-user-page-in-workday-316528-8ef4dc8a.webp)

   Due to XML encoding, the `&`, `<`, and
   `>` symbols cannot be included in the password.
5. Make sure the **Require New Password at Next Sign In** field is disabled.
   You want to add this user to the list of System Users to make sure the password
   doesn't expire.

## Create a security group and assign an Integration System User

Now, add the Integration System User created earlier to a Security Group.

1. In the search bar, type **Create Security Group**.
2. Select the **Create Security Group** task.
3. In the **Create Security Group** page, choose **Integration System Security Group (Unconstrained)** from the **Type of Tenanted Security Group** drop-down menu.
4. In the **Name** field, enter a name, and select **OK**.

   ![Create Security Group window in Workday](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-create-security-group-window-in-workday-316536-06c85934.webp)
5. In the **Edit Integration System Security Group (Unconstrained)** window, in the **Name** field, enter the same name that you used during the ISU creation process.

   ![Edit Integration System Security Group window in Workday](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-edit-integration-system-security-group-window-in-workday-316540-6973e1e3.webp)
6. Select OK.

## Configure domain security policy permissions

1. In the search bar, type **Maintain Permissions for Security Group.**
2. Select the **Maintain Permissions for Security Group** task.
3. Make sure the **Operation** field is set to **Maintain**, and confirm that the **Source Security Group** matches the security group assigned in the previous section.

   ![Maintain Permissions for Security Group task](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-maintain-permissions-for-security-group-task-316548-593bebf9.webp)
4. Add the **Domain Security Policy** corresponding to your needs. Note that **Get Only** is meant just to read data, whereas **Get** and **Put** are meant to read and create or update data. You can consult your implementation partner or administrator to configure these
   API permissions.

   ![Permissions list in Workday](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-permissions-list-in-workday-316552-afb30472.webp)

   Permissions might differ from one implementation to another. Work with your Workday administrator or implementation team to
   configure them.

## Activate security policy changes

1. In the search bar, type **Activate Pending Security Policy Changes**.
2. The **Activate Pending Security Policy Changes** task displays a summary of the changes in the security policy that need to be approved.
3. Add any relevant comments in the pop-window, in the **Comment** field.

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-316560-a76f7cc2.webp)
4. Select **OK** to confirm the changes and apply them.

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-316564-e3feee4a.webp)

## Validate that the authentication policy is sufficient

Check the **Manage Authentication Policies** window to ensure the ISU you created is added to
a policy that can access the necessary domains. It should **not** be restricted
to the **SAML** Allowed Authentication Types. If this is the case, you can create
a new **Authentication Policy** with a **User Name Password** Allowed
Authentication Type.

1. Select the **Edit** button to edit an authentication policy.

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-316568-aa3dc446.webp)
2. Make sure the **Environments** field is configured correctly. In this
   example, we use **Implemetation and Sales**.
3. Next, establish an **Authentication Rule Name** and include the **Security Group** within the rule.

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-316572-4c33273b.webp)
4. Make sure the **Allowed Authentication Types** is set to **Specific**, with the **User Name Password** option selected, or to **Any**.

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-316576-e835d8a3.webp)

## Activate all pending authentication policy changes

1. In the search bar, type **Activate All Pending Authentication Policy Changes**.
2. For this task, add a comment, such as "activating", and enable the **Confirm** field. Proceed to the next screen, confirming the changes. This saves the **Authentication Policy** that you just created.

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-316584-43ba717f.webp)

## Obtain the web services endpoint for the Workday tenant

In order to successfully create a connection, you also require your specific Workday
web services endpoint, which you can find out by performing the following steps:

1. In the search bar, type **Public Web Services**.
2. Open the **Public Web Services Report**.
3. Hover over any item and select the More options ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-367696-45418e9f.svg)
   menu.
4. Navigate to **Web Services \> View WDSL**. Scroll to the bottom of the
   page, where you can find the **WSDL URL**.
5. Search for a link that contains `services`, for example:
   `https://wd5-services.1.myworkday.com` or
   `https://wd2-impl-services.workday.com.`

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-316592-90c57e44.webp)

## Enter credentials into Integration Service

At this step you have obtained all the credentials required for creating a connection to
the Workday connector:

* **WSDL URL**: the Web Services
  Endpoint retrieved in [Obtain the web services endpoint for the Workday tenant](https://docs.uipath.com/integration-service/automation-cloud/latest/user-guide/prerequisites-for-creating-a-connection#obtain-the-web-services-endpoint-for-the-workday-tenant).
* **Username and Password**: the
  Integration System User's username and password set in [Create an Integration System User (ISU)](https://docs.uipath.com/integration-service/automation-cloud/latest/user-guide/prerequisites-for-creating-a-connection#create-an-integration-system-user-(isu)).
* **Tenant**: your Workday Tenant name. For example, if you sign in at
  `https://wd5-services1.workday.com/uipath`, enter
  `uipath`.