Connecting Deel to your Workday is a one-way sync integration. This article guides you on how to enable the PTO plugin as well as how to prepare your Workday tenant by setting up an API Client for Integration with the necessary permissions to access Time Off and Staffing data.
In this article:
Before you begin
Permissions:
- Be an Org Admin, IT Developer Admin, or Integrations Admin-People.
- Have Workday rights to create integration system users and manage security groups
Connect Workday to Deel
✅ Step 1 - Create an Integration System User (ISU)
Run Task "Create Integration System User" to create an ISU in Workday.
✅ Step 2 - Create a Security Group for the ISU
Run task "Create a Security Group" to create a security group for the previously created ISU
Select "Type of Tenanted Security Group": "Integration System Security Group (Unconstrained)
And make sure to add the ISU in "Integration System Users"
✅ Step 3 - Add required permissions to the Security Group
Run "Maintain Permission for Security Group", select the previously created Security Group and add the following "Domain Security Policy Permissions":
Finally, activate the permission changes by running "Activate Pending Security Policy Changes"
✅ Step 4 - Create an API Client For Integrations by running "Register API Client for Integrations"
Click "Ok" and copy the "Client ID" and "Client Secret" that will be displayed, these will be required later.
✅ Step 5 - Run "View API Clients" task
Run "View API Clients" task, in API Clients for Integrations select "Manage Refresh Tokens for Integrations"
In the modal displayed, select the ISU initially created, and hit OK
Next, select "Generate a new refresh token", make sure it's non-expiring, and confirm.
Copy the refresh token displayed.
Going back to "View API Clients", copy the displayed "Workday REST API Endpoint"
✅ Step 6 - In Deel, connect API Client
In Deel, select the Hub icon and Apps tab on your home page look for Workday, and enable the Integration.
EOR Time-Off plugin
After this step, click Connect in the "EOR Time off" Plugin:
A modal will appear asking for the credentials generated in the previous steps:
Hit submit and the API Client should now be connected to Deel.
People Match plugin
This plugin helps match Deel and Workday users by checking email addresses. For this integration to work, profiles between the two systems must align. If any users in Deel cannot be located in Workday, it's likely due to an email mismatch.
To fix this, ensure each Deel user has a matching Workday profile with the same email.
Frequently Asked Question
[ACCORDION] Can this integration be completed without technical experts on a group?
Deel offers an end-to-end implementation service in collaboration with Workday consultants, which includes complete set up and testing in a sandbox environment first. Please approach assigned Onboarding Manager if interested in this service.
[ACCORDION] Does the integration sync balances?
No, the integration does not sync or reconcile balances.
[ACCORDION] Why do we have discrepancies in balances between the two systems?
Discrepancies can arise if the total allowance in your HRIS system differs from that in Deel. To resolve this, ensure HRIS policy is aligned with Deel's. If alignment isn't possible, contact assigned Customer Success Manager (CSM) to discuss adjusting Deel’s contracts to better fit.
[ACCORDION] Why are the total allowances not the same in both systems?
The HRIS system may have PTO policies that differ from those in Deel, potentially leading to variations in accrual logic. As Deel cannot automatically align external systems to Deel's policies, any necessary adjustments must be made manually to ensure consistency.