This guide will tell you everything you need to know to connect Deel to Workday and start generating EOR employee contracts. 

 

In this guide you find information on:

Connecting Workday to Deel

Enabling HRIS plugins

Setting Up Onboarding for EOR Employees

Managing the EOR Onboarding Plugin

How EOR Contract Generation Works

Upcoming Plugins

Data Security

 

Before you start:

Please ensure you that you have the following permissions in both Deel and Workday before starting:

• You must be an Org Admin, IT Developer Admin, or Integrations Admin-People to set up this integration. 
• You must have Workday permissions to be able to create integration system users and set-up/amend security groups

In addition you will need to ensure:

• That you have a GMS/demo environment to initially test your integration connection. We strongly recommend that you do this

Finally, while you are not required to have a Deel test/demo environment to proceed, if you feel more comfortable having one our Deel Customer Success Managers can assist you.

 

Connect Workday to Deel

✅ Step 1 - Select Apps & Integrations from your Dashboard

Select the Workday app and click Connect to begin.

After you review the integration information click Continue to proceed. 

You must be an Org Admin, Integrations Admin, or Integrations Admin-People to set up this integration. 

 

✅ Step 2 - Obtain your Workday tenant and domain

2.1 - Go to Workday and search for Public Web Services from your dashboard to locate available Workday webservices.

 

2.2 - From the list of webservices locate Human Resources (Public). Click the 3 small dots next to the Public, go to Web Service and select View WSDL. You may have to wait for the page to fully render.

 

2.3 - Once the page has fully rendered scroll to the bottom to locate the WSDL URL. It will have the format similar to:

https://wd2-impl-services1.workday.com/ccx/service/thecompany/Human_Resources/v35.0

 

2.4 - You will need to retrieve two key pieces of information: the Domain and the Tenant.

The URL is always structured as:

https://{{ domain }}.workday.com/ccx/service/{{ tenant }}/Human_Resources/{{ version }}. 

You will need to save this information to enter into Deel.  Using our example URL in 2.3 above, the domain and tenant would be:

Example domain = wd2-impl-services1

Example tenant = thecompany

PLEASE NOTE: the domain and tenant fields are case sensitive.

 

2.5 - Return to your Deel integration screen and enter the domain and tenant.

 

✅ Step 3 - Create and enter your Workday username and password

Please note that this not your own username and password but those of the integration system user-account responsible for making Workday API requests to deliver data to Deel.

Return to Workday and follow these steps:

 

3.1 - Search for Create Integrations System User from the dashboard

 

3.2 - Create a user name and secure password and click OK to close the pop-up. 

 

3.3 - Click Done on the next page to create your integration system user.

 

3.4 - Return to Deel and enter the username and password credentials and click Validate & Continue

 

✅ Step 4 - Review the Customer Agreement 

Deel requires that you acknowledge the terms and conditions of using this integration. The current functionality is inbound and was built without the support of Workday. These terms and conditions are subject to change in the future.

Please read the terms and conditions and tick the box certifying your agreement, then click Complete Connection.

The Workday integration will automatically sync daily at 3am GMT.

 

Congratulations! You've made it this far. At this point you can click Exit and select the Yes, Save and Leave option if you'd like to take a break and complete the rest of the set-up later. 

You can pick up where you left off by returning to your Workday integration console. Select Apps & Integrations in the navigation menu and select the Workday tile. You will notice a badge on the tile that says 'incomplete'. This will remain until you have completed the rest of the set-up.

Ready? Let's continue.

 

Enable HRIS Plugins

Once you have established your connection you need to enable an HRIS plugin. 

When you initially establish the connection to your Workday tenant you will be asked if you want to enable this plugin. If you did not enable the plugin you can do so later. Please see the steps on setting up the HRIS plugin below.

 

Onboarding for Deel EOR Employees

This inbound plugin allows your group to join up the HR ‘handoff’ process when you make the decision to hire someone on your group using a Deel EOR entity. 

You may find this plugin beneficial if:

1. You create Workers or Contingent Workers in Workday before you onboard them in Deel. This may be necessary if you have sophisticated approval or referencing processes that you run within Workday
2. You want to limit administrative access to Deel due to the sensitive functionality available in the Deel platform. For instance, you might have your HR group running approvals of new workers in Workday. To initiate onboarding in Deel, which involves signing processes, you might just want a small number of users in there.
3. You want to eliminate double-keying of information. This plugin will pull information from the Worker or Contingent Worker profile and pre-populate the EOR quote that initiates the onboarding process.

Instructions on how to set up the plugin:

✅ Step 1 - Review your permissions

Make sure you have assigned the recommended permissions in Workday in a security group. This integration uses certain data from the Worker or Contingent Worker profile. This plugin requires access to 17 ‘Get Only’ operations from the Workday webservice. Please see the needed ones below:

 

Domain Security Policy Permissions (recommended)

Operation	Domain Security Policy	Domain Security Policies Inheriting Permission	Functional Areas
Get Only	Staffing Actions: Compensation for All Job Profiles		Staffing
Get Only	Worker Data: Compensation Summary by Job Profile		Core Compensation
Get Only	Worker Data: Compensation by Organization		Core Compensation
Get Only	Worker Data: Public Worker Reports		Staffing
Get Only	Worker Data: Current Job Profile Information		Staffing
Get Only	Person Data: Name	Person Data: Legal Name	Contact Information
Get Only	Staffing Actions: Job Profile		Staffing
Get Only	Person Data: Personal Data	Person Data: Aboriginal/Indigenous Identification	Personal Data
Get Only	Set Up: Payroll (Customer Country Configuration)		Core Payroll
Get Only	Worker Data: All Positions		Staffing
Get Only	Worker Position: View		Staffing
Get Only	Manage: Name Information		System
Get Only	Worker Data: Position and Employee Worktag		Common Financial Management
Get Only	Worker Data: Job Details		Staffing
Get Only	Job Profile: View		Jobs & Positions
Get Only	Job Information		Jobs & Positions
Get Only	Job Requisition Data		Pre-Hire Process

 

✅ Step 2 - Enable your plugins

From the Plugins tab of your integration console in Deel, click on Enable which will take you through a brief setup process.

 

✅ Step 3 - Select worker data for creating contracts

Select whether you will use "Contingent Worker" or "Worker" to ingest data for creating EOR contracts. Please note that for compliance reasons we recommend that you use “Contingent Worker” unless you have a valid use-case for using the "Worker" option.

PLEASE NOTE that if you need to change this setting you will need to delete and reinstall the plugin.

 

✅ Step 4 - Specify the worker types to trigger EOR onboarding

Workday's API does not allow Deel to read all Employee Types of Contingent Worker Types unless in the context of reading worker information. In other words we are only able to see the options by looking at a specific Worker or Continent Worker.

We need you to input word-for-word each Contingent Worker Type of Employee Type (depending on the object you selected for this plugin in Step 3) that we should use to identify workers for whom we should generate new draft EOR contracts. You can add new worker types by clicking Add New Type. Delete any worker types by clicking the blue wastebin.

PLEASE NOTE that while this field is not case sensitive the wording needs to match exactly.

 

✅ Step 5 - Enable the plugin

Click Enable Plugin and you will be returned to the main plugin menu. From here you can manage the plugin by clicking Manage and entering the plugin settings.

 

Managing the EOR Onboarding Plugin

The plugin works by scanning your Workday tenancy for any Contingent Workers with the specified Contingent Worker types (or workers with the specified Employment Types if you selected "Worker" in step 3 above) to generate daft EOR quotes for.

 

Synching Deel with Workday

We scan for newly added Workers or Contingent Workers every 4 hours, however you can execute synching on demand with these simple steps:

 

✅ Step 1 - Navigate to the Workday Integrations Console in Deel

Go to the Plugins tab and and locate the Onboarding for Employees plugin and click Customize.

 

✅ Step 2 - Click Sync 

 

How Draft EOR Contract Generation Works

Please ensure you are familiar with the way that Deel EOR quote creation works as the EOR onboarding plugin essentially joins up the process of requisitioning new workers and generating a quote. 

 

Introduction

Now that you have set-up your onboarding plugin we will generate draft contracts to assist with the HR handoff process for any new workers you add with the employee or contingent worker types that you define.

PLEASE NOTE that at the time of writing Deel client users do not receive notifications if a new draft contract is generated from Workday.

Further, we do not require that you grant us permission to all the recommended data fields as the Deel platform requires just first and last name to create a draft contract. That being said, we highly recommend configuring a security group that gives us access to more information.

 

Accessing Draft Contracts

You can access draft contracts by going to the Contracts menu bar and filtering by Contract Type and selecting Draft.

This will return any draft contracts.

 

Drafts will look like this:

 

Note that you can see the source of the draft contract in parentheses. You can also see the status is “Draft”.

These draft contracts will need to be completed and submitted for quote review.

When you select a draft contract to review it will include a summary of all the information that Deel collected from Workday.

 

Important notes

Please note the following on the functionality:

• We update the draft contract if any changes were detected in subsequent syncs
• Once the quote has been submitted, Deel in no longer able to accept changes from Workday.
• We prevent duplicate draft contracts being created by looking at common email address. Therefore we strongly recommend that you enable the permissions on your Workday security group for us to access personal and work email addresses.
• Sometimes information that comes from Workday cannot be used to generate an EOR quote. However, this will not prevent the creation of the draft contract. When a user in Deel proceeds with completing the draft contract to generate the quote, they will see any unacceptable data and have the chance to amend it.

Field Mappings

At the time of writing Deel maps to the majority of data fields required for generating a draft contract It is crucial to note that we do not yet map to list/picker type fields, nor fields that are country-specific. We are always working to add new field mapping capabilities however there will still be some information that you will need to complete. Further, at this time we pre-select how fields on the Worker map to Deel EOR draft contract fields.

Please take note below of the fields we support and how they are mapped:

Workday Field	Deel EOR Quote Field	Notes
First name	Employee first and middle names	We take the first and middle names fields in Workday and concatenate them into this field in Deel.
Middle names
Last name	Employee Last Name	N/A
Primary Nationality	Employee Nationality	Please note that you must still specify whether worker needs a visa within Deel.
Position (Job > Job Details)	Job Title	We look at the active or soonest-to-start job in workday according to effective date,
Position (Job > Job Details)	Explanation of Job Scope	In EOR the job scope field must be above 100 characters and not contain references to Deel or Client. If the data coming from Workday conflicts with this logic you will see it indicated.
Total Base Pay (Compensation > Totals)	Gross Annual Base Salary	We look at the compensation for the salary plan with the soonest starting effective date. Furthermore we only will read Annual Salary. Please note that every jurisdiction and EOR entity has different salary minimums and maximums. If those come into conflict you will see it indicated when filling out the quote.
Effective Date (Job > Job Details)	Desired Start Date.	Please note that sometimes the effective date (of the soonest employment in Workday) will conflict with Deel business logic. This will be indicated when completing the quote.

 

Data Security

In order to access information we rely on the customer API webservice, which requires you to enter in certain credentials. Dee stores these in an encrypted manner by calculating a SALT and using AES 256 encryption. For added security, you can configure the security group granted to the integration user to only provide access to certain workers. Speak to your Workday consultant to learn how to do this.