The External Payroll Documents (ExPD) plugin syncs payslips and tax documents generated in Deel to Workday, so that workers and admins can access them directly from the Workday worker profile.
Data synced: Payslips, Tax documents
Sync direction: Deel to Workday (outbound)
Available for: Global Payroll (GP), EOR (Beta)
In this article
Before you begin
Before starting the ExPD setup, make sure you have completed the required parts of the common connection setup. If you haven't done this yet, go to How to connect Workday GPC to Deel first.
Part 1 and part 3 of the common setup must be complete before continuing:
- Part 1: Connecting Workday to Deel - creating an ISU, setting up security groups, an API client, tokens, and connecting to Deel
- Part 2 (DCoD setup) is not required for ExPD. If you are currently using the External Payslips REST API, you must disable it before enabling ExPD.
Required permissions
Before you enable the ExPD plugin, add the following permissions to your security group in Workday. Use the Maintain Permission for Security Group task to add these.
| Permission | Access Type | User Group |
|---|---|---|
| Integration Event | Get/Put | ISU |
| Payroll Interface | Get/Put | ISU |
| Person Data: Home Contact Information | Get | ISU |
| Person Data: Public Home Email Address Integration | Get/Put | ISU |
| Person Data: Public Work Email Address Integration | Get/Put | ISU |
| Person Data: Work Contact Information | Get | ISU |
| Reports: Pay Calculation Results for Worker (External Payroll Documents) | View/Mod | Admins |
| Reports: Pay Calculation Results for Worker (Payslips) | View/Mod | Admins |
| Set Up: External Payroll Documents | View/Mod | ISU |
| Set Up: Payroll | View/Mod | ISU |
| Set Up: Payroll Interface | Get/Put | ISU |
| Set Up: Payroll Pay Group Specific | View/Mod | ISU |
| Self Service: Payroll (My Payslips) | View/Mod | Employees |
| Self Service: Payroll Interface | View/Mod | Employees |
| Self Service: Payroll Interface (External Payroll Documents) | View/Mod | Employees |
| View: Maintain Payroll Interface | View/Mod | Admins, ISU |
| Worker Data: Payroll Interface | Get/Put | ISU |
| Worker Data: Payroll Interface (External Payroll Documents) | Get/Put | ISU |
Access type definitions:
- Get = Read-only access via the integration layer
- Get/Put = Read and write access via the integration layer
- View = Read access via the UI
- View/Mod = Read and modify access via the UI
Activating domains for optional plugins
Some plugins require additional domain security policies to be active in Workday before they can be enabled in Deel. Each time you enable a new plugin, complete the steps below for that plugin before proceeding to its setup guide.
To find out which domains are required for the plugin you are setting up, refer to the Security permissions reference and locate the column for your plugin.
Step 1: Activate the required domains
- Search for the domain using the domain: prefix. For example, domain: Set Up: Payroll Interface.
- In the Domain Security Policy section, use the related actions to go to Domain Security Policy > Enable.
- On the following screen, confirm the enablement.
- Repeat for any remaining domains required for your plugin.
If a domain is already active, skip it and move to the next one.
Step 2: Assign users or groups to domains
- Open the domain.
- In the Domain Security Policy section, use the related actions to go to Domain Security Policy > Edit Permissions.
- In the Report/Task Permissions section, check that the required security groups are present. If any are missing, add them.
- Save your changes.
To add users to the relevant security group, use the Assign Users to User-Based Security Group task.
Step 3: Activate pending security policy changes
- Launch the Activate Pending Security Policy Changes task.
- Enter a comment describing the reason for the change and save.
For more information, visit Activate Pending Security Policy Changes in the Workday Community.
Workday setup
Step 1: Add ExPD scopes to the API client
- Launch the View API Clients report and go to the API Clients for Integrations tab.
- Select the API client created during the common setup.
- Use the related actions to go to API Client > Edit API Client for Integrations.
- Add the required scopes for ExPD as listed in the Scopes reference.
- Click OK to save your changes.
Step 2: Configure the worker profile for ExPD
- Launch the Configure Profile Group task.
- Select the Pay for Worker Profile profile group.
- Add the following sections to the profile group:
- Payslips
- Tax Documents
- Save your changes.
Step 3: Activate pending security policy changes
- Launch the Activate Pending Security Policy Changes task.
- Enter a comment describing the reason for the change and save.
Deel setup
Step 4: Enable the document sync plugin
- From the integration's main page in Deel, locate the Documents sync plugin and click Enable.
- Turn on the sync for the document types you want to sync.
Documents will sync at the next scheduled sync. Workers can view them by going to their Workday profile and clicking on Pay, then selecting the relevant tab.
Using ExPD
As a worker
- Go to your Workday profile.
- Go to one of the following locations to find your synced payroll documents:
- Pay > Payslips
- Pay > Tax Documents
As an admin
- Search for and open the worker's profile.
- Go to one of the following locations:
- Pay > Payslips
- Pay > Tax Documents