External Payroll Results (ExPR) allows payroll results to be sent from Deel to Workday as result lines. This gives workers and admins visibility of the breakdown of their salary packages and enables detailed earnings and deductions reporting in Workday, including for G2N calculations.
Data synced: Payroll result lines, earnings and deductions breakdown
Sync direction: Deel to Workday (outbound)
Available for: Global Payroll (GP)
In this article
Before you begin
You must have completed:
Part 1: Connecting Workday to Deel - creating an ISU, setting up security groups, an API client, tokens, and connecting to Deel
Deel automatically maps payroll components between systems by matching component names exactly. When a component name in Deel matches one in Workday, it is mapped automatically. When no match is found, a new component is created in Workday. A dedicated mapping screen is planned for a future release.
Required permissions
Before you enable the ExPR plugin, add the following permissions to your security group in Workday. Use the Maintain Permission for Security Group task to add these.
| Permission | Access Type | User Group |
|---|---|---|
| Integration Event | Get/Put | ISU |
| Payroll Interface | Get/Put | ISU |
| Set Up: Payroll Interface | Get/Put | ISU |
| Set Up: Payroll Pay Group Specific | View/Mod | ISU |
| View: External Payroll Results | View | ISU, Admins |
| View: Maintain Payroll Interface | View/Mod | ISU, Admins |
| Self Service: Payroll Interface (External Payroll Results) | View/Mod | Employees |
| Worker Data: Payroll Interface | Get/Put | ISU |
Access type definitions:
- Get = Read-only access via the integration layer
- Get/Put = Read and write access via the integration layer
- View = Read access via the UI
- View/Mod = Read and modify access via the UI
For detailed information on all available permissions, see the Security permissions reference in the Overview.
Required domains
This plugin requires the following domains to be activated in Workday:
- Set Up: Payroll Interface
- View: Maintain Payroll Interface
- Set Up: Payroll Pay Group Specific
- Worker Data: Payroll Interface
- View: External Payroll Results
- Self Service: Payroll Interface (External Payroll Results)
Follow the steps below to activate these domains.
Activating domains for optional plugins
Some plugins require additional domain security policies to be active in Workday before they can be enabled in Deel. Each time you enable a new plugin, complete the steps below for that plugin before proceeding to its setup guide.
To find out which domains are required for the plugin you are setting up, refer to the Security permissions reference and locate the column for your plugin.
Step 1: Activate the required domains
- Search for the domain using the domain: prefix. For example, domain: Set Up: Payroll Interface.
- In the Domain Security Policy section, use the related actions to go to Domain Security Policy > Enable.
- On the following screen, confirm the enablement.
- Repeat for any remaining domains required for your plugin.
If a domain is already active, skip it and move to the next one.
Step 2: Assign users or groups to domains
- Open the domain.
- In the Domain Security Policy section, use the related actions to go to Domain Security Policy > Edit Permissions.
- In the Report/Task Permissions section, check that the required security groups are present. If any are missing, add them.
- Save your changes.
To add users to the relevant security group, use the Assign Users to User-Based Security Group task.
Step 3: Activate pending security policy changes
- Launch the Activate Pending Security Policy Changes task.
- Enter a comment describing the reason for the change and save.
For more information, visit Activate Pending Security Policy Changes in the Workday Community.
Workday setup
Step 1: Add ExPR scopes to the API client
- Launch the View API Clients report and go to the API Clients for Integrations tab.
- Select the API client created during the common setup.
- Use the related actions to go to API Client > Edit API Client for Integrations.
- Add the required scopes for ExPR as listed in the Scopes reference.
- Click OK to save your changes.
Step 2: Configure the worker profile for ExPR
- Launch the Configure Profile Group task.
- Select the Pay for Worker Profile profile group.
- Add External Payroll Results for Worker to the profile group.
- Click OK to save your changes.
If you have configured ExPR data to show in a custom report, you can select that report here. The name you choose determines how the information appears in the worker profile.
Step 3: Activate pending security policy changes
- Launch the Activate Pending Security Policy Changes task.
- Enter a comment describing the reason for the change and save.
Deel setup
Step 4: Enable the ExPR plugin
- From the integration's main page in Deel, locate the External Payroll Results (ExPR) sync plugin and click Enable.
- If this is the first time setting up ExPR, verify that your ISU has all the required permissions, then click Continue.
- Map the Deel pay groups to the Workday pay groups, then click Continue.
- Review the sync process details, then click Continue.
ExPR will automatically map Deel payroll components to Workday ones and sync result lines at the next scheduled sync.
Using ExPR
As an admin: use ExPR for reporting
After ExPR is set up, you can use the synced data to generate reports in Workday specific to your business needs. For more information on how to build reports using ExPR data, refer to the following Workday Community documentation:
As a worker: view ExPR data
- Go to your profile > Pay, then go to External Payroll Results for Worker.
- The external payroll results synced from Deel are displayed in the list.
The section name depends on the name the admin has given to the report containing this information. If you cannot find External Payroll Results for Worker, it may be in a custom report — ask your Workday admin for the report name.