# Workday REST authentication

> To create a connection to the Workday REST connector, you need the following credentials:

## Prerequisites

To create a connection to the Workday REST connector, you need the following credentials:

* REST API Endpoint
* Authorization URL
* Token URL
* Client ID
* Client secret
* Your Workday username and password.

## How to configure an OAuth API client in Workday

The Workday REST connector is based on the [Workday REST API](https://doc.workday.com/reader/wsiU0cnNjCc_k7shLNxLEA/HvgwLwxCHVdBlZUTNd9s7A).

You must create an API client or use an existing API client for your integration.

To check existing API clients, navigate to the **View API Clients** tab in your Workday dashboard. This is where you can retrieve the required credentials: the REST API Endpoint, Authorization
URL, and Token URL.

![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-469164-56dc813d.webp)

To create a new API client, follow these steps:

1. Sign in to the Workday portal.
2. Using the search bar, find the **Register API Client** task.

   ![docs image](https://dev-assets.cms.uipath.com/assets/images/integration-service/integration-service-docs-image-469169-690663c3.webp)
3. Configure the new API client details. First, set a **Client Name**. Choose one that is easily distinguishable from others you may already have.
4. Set **Client Grant type** to **Authorization Code Grant**.
5. Set **Access Token** to **Bearer**.
6. Set the **Redirection URI** to `https://{baseURL}/provisioning_/callback`.
7. Enable the **Non-Expiring Refresh Tokens** option.
8. In the **Scopes (Functional Areas)** field, add the permissions required for the processes you want to create.
   * For WQL operations, you must select the **System - Workday Query Language** scope.
   * The [HTTP Request](https://docs.uipath.com/activities/other/latest/integration-service/http-request-activity) activity allows you to call any Workday REST API as long as you set the necessary permissions using the **Scope** field.
9. The **Include Workday Owned Scope** field is optional. It grants access to API scopes that are owned and managed by Workday itself. When you enable this option,
   the API client can interact with more proprietary or system-level functionalities.
10. Once you create the new client, copy and save the client ID and client Secret. You will use them when you create a connection
    to the UiPath Workday REST connector.

## Add the Workday REST connection

1. Select Orchestrator from the product launcher.
2. Select a folder, and then navigate to the **Connections** tab.
3. Select **Add connection**.
4. To open the connection creation page, select the connector from the list. You can use the search bar to find the connector.
5. Enter your required credentials and select **Connect**.

   For any secret-type field, you can select the menu next to the field and choose **Use credential asset** to reference an Orchestrator credential asset linked to an external vault instead of entering the value directly. For more information, see [Use credential assets for connections](credential-store-connections.md).
6. You are then prompted to sign in to Workday with your username and password.