Connecting Deel to your Workday is a one-way sync integration. This article guides you on how to enable the PTO plugin as well as how to prepare your Workday tenant by setting up an API Client for Integration with the necessary permissions to access Time Off and Staffing data.
In this article:
Before you begin
Permissions:
- Be an Org Admin, IT Developer Admin, or Integrations Admin-People.
- Have Workday rights to create integration system users and manage security groups
Connect Workday to Deel
Step 1 - Create an Integration System User (ISU)
Run Task "Create Integration System User" to create an ISU in Workday.
Step 2 - Create a Security Group for the ISU
Run task "Create a Security Group" to create a security group for the previously created ISU
Select "Type of Tenanted Security Group": "Integration System Security Group (Unconstrained)
Make sure to add the ISU in "Integration System Users"
Step 3 - Add required permissions to the Security Group
Run "Maintain Permission for Security Group", select the previously created Security Group, and add the following "Domain Security Policy Permissions":
Finally, activate the permission changes by running "Activate Pending Security Policy Changes"
Step 4 - Create an API Client For Integrations by running "Register API Client for Integrations"
Click "Ok" and copy the "Client ID" and "Client Secret" that will be displayed, these will be required later.
Step 5 - Run the "View API Clients" task
Run the "View API Clients" task, in API Clients for Integrations select "Manage Refresh Tokens for Integrations"
In the modal displayed, select the ISU initially created, and click OK.
Next, select "Generate a new refresh token", make sure it's non-expiring, and confirm.
Copy the refresh token displayed.
Going back to "View API Clients", copy the displayed "Workday REST API Endpoint"
Step 6 - In Deel, connect API Client
Go to More > Apps > Workday to connect.
EOR Time-Off plugin
After this step, click Connect in the "EOR Time off" Plugin:
A modal will appear asking for the credentials generated in the previous steps:
Hit submit and the API Client should now be connected to Deel.
People Match plugin
This plugin helps match Deel and Workday users by checking email addresses. For this integration to work, profiles between the two systems must align. If any users in Deel cannot be located in Workday, it's likely due to an email mismatch.
To fix this, ensure each Deel user has a matching Workday profile with the same email.
Frequently asked questions (FAQs)
[ACCORDION] Can this integration be completed without technical experts in a group?
Deel offers an end-to-end implementation service in collaboration with Workday consultants, which includes complete setup and testing in a sandbox environment first. Please approach your assigned Onboarding Manager if interested in this service.
[ACCORDION] Does the integration sync balances?
No, the integration does not sync or reconcile balances.
[ACCORDION] Why do we have discrepancies in balances between the two systems?
Discrepancies can arise if the total allowance in your HRIS system differs from that in Deel. To resolve this, ensure HRIS policy is aligned with Deel's. If alignment isn't possible, contact your assigned Customer Success Manager (CSM) to discuss adjusting Deel’s contracts to better fit.
[ACCORDION] Why are the total allowances not the same in both systems?
The HRIS system may have PTO policies that differ from those in Deel, potentially leading to variations in accrual logic. As Deel cannot automatically align external systems to Deel's policies, any necessary adjustments must be made manually to ensure consistency.