Workday provides the ability to enable employees to access their external tax documents directly from the Workday UI. When an employee navigates to Worker Profile > Pay > Tax Documents, Workday calls the external payroll vendor’s REST APIs in real-time to retrieve the list of available documents. When the employee selects a document, Workday invokes the vendor’s endpoint again to stream the PDF inside Workday. (No documents are stored in Workday.)

Setting up the Integration

You will complete a sequence of eight Workday + Deel configuration steps.
Steps 1–2 are performed in Deel, while Steps 3–7 are performed in Workday.
Step 8 re-enables the Deel plugin once everything is connected.

✅ Prerequisites (applies to the entire workflow)

• Administrator permissions in Deel (Org Admin, Integrations Admin, or Integrations Admin – People)
• Ability to create or update External Payroll Vendor records in Workday
• Workday REST API credentials (Endpoint, Client ID, Client Secret, Refresh Token)

✅ Step 1 – Initiate the integration in Deel

Follow these in-app steps to place Deel into “ready-to-connect” mode and supply your Workday API credentials.

1. Open the More menu
   From the Deel home page, click More in the top navigation bar.
   

2. Access the Apps section
   In the dropdown, select Apps.
   

3. Search for Workday
   On the Apps overview page, use Find apps and type “Workday.”
   

4. Open the Workday app
   Select Workday – Enterprise management cloud from the search results.
   

5. Click Connect
   On the Workday integration page, click Connect next to the plugin you intend to use (e.g., EOR – Payslip & Tax Document Sync).
   

6. Enter Workday API credentials
   In the Integrate with Workday API modal, supply:
   • Workday REST API Endpoint
   • Client ID
   • Client Secret
   • Refresh Token
   Click Submit.
   

Expected outcome: The credentials modal confirms that Deel is now waiting for a successful handshake from Workday.

Troubleshooting – Step 1

• Connect button missing? Ensure you have the required admin role and the integration is not already connected.
• Credential errors? Double-check endpoint URL, client ID/secret, and refresh token values.
• If issues persist, refresh the page or contact Deel Support.

✅ Step 2 – Open the Global Payroll – Payslips & Tax Document Sync plugin

1. From the Workday app page, locate GP – Payslips & Tax Document Sync under the plugin list.
2. Click Enable.
3. Next, click the Tax & Documents Syncing tile to display the Tax and Documents Retrieval URL and Public Key fields you will populate later.

✅ Step 3 – Create (or edit) the External Payroll Vendor in Workday

If you have already configured the External Payslip feature, simply edit that Vendor record to add the External Tax Documents feature and skip to Step 6.

Otherwise: 1. In Workday, create a new External Payroll Vendor.
2. Set Name to “Deel” (or a name of your choice).
3. Under Features, select External Tax Documents.

✅ Step 4 – Create External Payroll Vendor Mapping

Map the vendor you just created to every Workday Environment that requires access (Implementation, Sandbox, Production, etc.).

✅ Step 5 – Create Public / Private Key Pairs in Workday

1. While editing the Vendor record, click OK. You will be prompted to create key pairs.
2. Enter a Key Pair Name and select Do Not Allow Regeneration.
3. Activate the key pair.
4. Copy the Public Key value—​you will paste it into Deel in Step 2.

✅ Step 6 – Feature Configuration in Workday

1. In the Vendor record, open Feature Configuration.
2. For the External Tax Documents feature, add an attribute row where:
   • Attribute = Retrieval Endpoint
   • Value = the URL displayed in Deel’s Tax and Documents Retrieval URL field (from Step 2).

✅ Step 7 – Maintain Pay Group ↔ Vendor Associations

In Workday, link every Pay Group that should surface Tax Documents to the new External Payroll Vendor you configured.

✅ Step 8 – Enable Deel’s plugin (finalize sync)

Return to Deel > Workday > GP – Payslips & Tax Document Sync and click Enable once more. Deel will now begin responding to Workday’s REST-API requests for Tax Documents.

Tax Document Security Access

Only the employee (Employee Self-Service) can view their own Tax Documents inside Workday. Administrators cannot access employee PDFs through this API-driven flow.