Connecting Deel to your Workday is a one-way sync integration. This article guides you on how to enable the PTO plugin as well as how to prepare your Workday tenant by setting up an API Client for Integration with the necessary permissions to access Time Off and Staffing data.
In this article:
Before you begin
Permissions:
- Be an Org Admin, IT Developer Admin, or Integrations Admin-People.
- Have Workday rights to create integration system users and manage security groups
Connect Workday to Deel
✅ Step 1 - Create an Integration System User (ISU)
Go to your Workday account and initiate the Create Integration System User task to establish an ISU.
✅ Step 2 - Create a Security Group for the ISU
Start the Create a Security Group task - the name for this security group should be the ISU name with an "_SG" suffix.
Under Type of Tenanted Security Group, select "Integration System Security Group (Unconstrained)" and ensure the initially created ISU is added to "Integration System Users".
✅ Step 3 - Add required permissions to the Security Group
Initiate "Maintain Permission for Security Group". Choose the security group you created and add the necessary "Domain Security Policy Permissions". Activate these permission alterations with "Activate Pending Security Policy Changes".
✅ Step 4 - Create an API Client For Integrations
Run the "Register API Client for Integrations" task and provided the necessary details. Click Ok and note down the displayed "Client ID" and "Client Secret" for later use.
✅ Step 5 - Manage API Clients
Execute the "View API Clients" task.
Under "API Clients for Integrations", select "Manage Refresh Tokens for Integrations". From the pop-up that appears, select your initial ISU and click Ok. Opt for "Generate a new refresh token", ensure it's non-expiring, and validate. Copy the displayed refresh token, return to "View API Clients" and copy the shown "Workday REST API Endpoint".
EOR Time-Off plugin
Navigate to App Store within Deel and activate the Workday integration. For the EOR Time off plugin, click Connect.
You'll be prompted for credentials from earlier steps. Input them and hit submit.
Voila! Your API Client is now linked to Deel.
People Match plugin
This plugin helps match Deel and Workday users by checking email addresses. For our integration to work, profiles between the two systems must align. If any of your users in Deel cannot be located in Workday, it's likely due to an email mismatch. To fix this, ensure each Deel user has a matching Workday profile with the same email.
Frequently Asked Question
[ACCORDION] Can I complete this integration if I do not have technical experts on my group?
Deel offers an end-to-end implementation service in collaboration with Workday consultants, which includes complete set up and testing in a sandbox environment first. Please approach your Onboarding Manager if you are interested in this service.
[ACCORDION] Does the integration sync balances?
No, the integration does not sync or reconcile balances.
[ACCORDION] Why do we have discrepancies in balances between the two systems?
Discrepancies can arise if the total allowance in your HRIS system differs from that in Deel. To resolve this, ensure that your HRIS policy is aligned with Deel's. If alignment isn't possible, contact your Customer Success Manager (CSM) to discuss adjusting Deel’s contracts to better fit your company's policy where feasible.
[ACCORDION] Why are the total allowances not the same in both systems?
The HRIS system may have PTO policies that differ from those in Deel, potentially leading to variations in accrual logic. As Deel cannot automatically align external systems to our policies, any necessary adjustments must be made manually to ensure consistency.