Workday

Extract workforce and user activity data from Workday REST APIs, including Staffing, Payroll, Absence Management, Time Tracking, and Privacy.

Overview
Setup Guide
Permissions
Troubleshooting

Connect Parable to Workday via OAuth 2.0 client credentials for REST API access to workforce data and Privacy API user activity entries.

Info: For RaaS custom reports (pre-encoded report token + report URL), use Workday HRIS RaaS instead.

Info: Workday does not use OAuth scope strings (unlike Salesforce api or Google https://www.googleapis.com/auth/...). Access is controlled by two layers you configure in Workday:

Functional areas on the API client (labeled Scope (Functional Areas) on the registration form)

Domain security policies on the Integration System User’s security group (GET/View permissions)

Parable sends a client-credentials token request with no scope parameter. If either layer is missing, token exchange or API calls fail with 403 Forbidden or empty field sets.

Staffing & Organizations

Workers, positions, job requisitions, org hierarchy, org chart

Payroll, Absence & Time

Payroll inputs, payment elections, pay slips, absence balances, time off, time blocks

Privacy and auditing

User Activity Logging entries for Workday tasks, reports, sessions, and request contextThis integration uses OAuth 2.0 Client Credentials flow for server-to-server authentication.

How It Works

Your app sends Client ID and Client Secret to the token endpoint
Workday returns a short-lived access token (typically 1 hour)
Use the access token in API requests
When expired, request a new token (automatic in Parable)

Token Request

cURL

curl -X POST "https://YOUR_SERVICES_HOST/ccx/oauth2/YOUR_TENANT/token" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "grant_type=client_credentials" \
  -d "client_id=YOUR_CLIENT_ID" \
  -d "client_secret=YOUR_CLIENT_SECRET"

Python

response = requests.post(
    "https://YOUR_SERVICES_HOST/ccx/oauth2/YOUR_TENANT/token",
    data={
        "grant_type": "client_credentials",
        "client_id": "YOUR_CLIENT_ID",
        "client_secret": "YOUR_CLIENT_SECRET"
    }
)

access_token = response.json()["access_token"]
print(f"Access Token: {access_token}")

Using the Access Token

Authorization: Bearer {access_token}

Info: Parable automatically handles token refresh, so you don’t need to manage token expiration manually.

Parable does not send a scope query parameter on the token request. Required access is enforced by the API client’s functional areas and the ISU domain policies configured in Workday.Grant the functional areas and domain permissions above for all rows below. Child endpoints are fetched from parent worker or organization IDs.

Parable data	REST endpoint	API version	Functional area (Scope)
`workers`	`/workers`	staffing/v7	Staffing
`positions`	`/positions`	staffing/v7	Staffing
`job_requisitions`	`/jobRequisitions`	staffing/v7	Staffing
`organizations`	`/organizations`	staffing/v7	Organizations and Roles
`supervisory_organizations`	`/supervisoryOrganizations`	staffing/v7	Organizations and Roles
`org_members`	`/supervisoryOrganizations/{org_id}/members`	staffing/v7	Organizations and Roles
`org_chart`	`/supervisoryOrganizations/{org_id}/orgChart`	staffing/v7	Organizations and Roles
`payroll_inputs`	`/payrollInputs`	payroll/v2	Payroll
`payment_elections`	`/paymentElections`	payroll/v2	Payroll
`worker_pay_slips`	`/workers/{worker_id}/paySlips`	payroll/v2	Payroll
`absence_balances`	`/balances`	absenceManagement/v2	Absence Management
`worker_leaves_of_absence`	`/workers/{worker_id}/leavesOfAbsence`	absenceManagement/v2	Absence Management
`worker_eligible_absence_types`	`/workers/{worker_id}/eligibleAbsenceTypes`	absenceManagement/v2	Absence Management
`time_off_details`	`/workers/{worker_id}/timeOffDetails`	absenceManagement/v2	Absence Management
`worker_time_blocks`	`/workerTimeBlocks`	timeTracking/v5	Time Tracking
`user_activity_logging`	`/activityLogging`	privacy/v1	System

Info: Organization endpoints live under the staffing/v7 REST path but require the Organizations and Roles functional area (Scope) on the API client.

Data streams

This Provider Plugin defines 16 data streams.

Stream	Description	Sync
`workers`	Employee and contingent worker records from the Staffing API	full
`positions`	Extracts all position records (open and filled) from the Workday Staffing REST API. Positions represent authorized headcount slots within the organization. Paginated via offset/limit. Full sync only.	full
`job_requisitions`	Extracts all job requisition records from the Workday Staffing REST API. Job requisitions represent approved requests to fill positions. Paginated via offset/limit. Full sync only.	full
`organizations`	Extracts all organization records from the Workday Staffing REST API. Organizations represent supervisory, cost center, company, and other org structures. Paginated via offset/limit. Full sync only.	full
`supervisory_organizations`	Supervisory organization hierarchy from the Staffing API	full
`org_members`	Members of a supervisory organization	full
`org_chart`	Organization chart for a supervisory organization	full
`payroll_inputs`	Payroll input records from the Payroll API	incremental
`payment_elections`	Payment election rules from the Payroll API	full
`worker_pay_slips`	Pay slips for a worker from the Payroll API	full
`absence_balances`	Extracts absence/accrual balance records for workers from the Workday Absence Management REST API. Returns balance data per worker per absence type. Supports filtering by worker ID and effective date. Paginated via offset/limit with a default page size of 20 and max of 100. Full sync only; no incremental field documented.	full
`worker_leaves_of_absence`	Extracts leave-of-absence records for each worker from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Returns leave records with fields including effectiveDate, dateOfFirstAbsence, stopPaymentDate, singleParentIndicator, multipleChildIndicator, and childsDateOfDeath. Traversal is required: one call per worker ID obtained from the workers tap.	full
`worker_eligible_absence_types`	Extracts the absence/leave types that each worker is eligible for, from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Useful for understanding leave entitlements and work taxonomy. One call per worker ID.	full
`time_off_details`	Time off detail records per worker from the Absence Management API	incremental
`worker_time_blocks`	Extracts time block records for workers from the Workday Time Tracking REST API. Time blocks represent individual time entries logged by workers. Uses the explicit service path for Time Tracking. Paginated via offset/limit. Note: the /v1/ shortcut returns 404 for Time Tracking; the explicit versioned path is required. Confidence in exact query parameters is moderate — consult Time Tracking API docs for additional filter params (e.g., startDate, endDate).	full
`user_activity_logging`	User Activity Logging entries from the Workday Privacy API, including the system account, request time, task, session, action, target, IP address, device type, and user agent returned by Workday. This stream is disabled by default.	incremental

The User Activity Logging stream reads one-day UTC windows and requests pages of 1,000 entries. Workday caps each retrieval window at 10,000 entries, retains entries for about 30 days, and makes new entries available about every two minutes. A tenant that exceeds 10,000 entries in one day can omit later entries from that day with the current connector behavior.Workday does not provide an event ID for this stream. Parable computes a replay key from the system account, request time, task ID, session ID, action, and target ID. Exact events with the same values in those fields cannot be distinguished. Workday can omit the target object. User Activity Logging does not record every click or activity duration and does not establish productive time or employee performance.

What You’ll Need

Credential	What it is
Client ID	OAuth 2.0 client ID from Register API Client for Integrations
Client Secret	OAuth 2.0 client secret (shown once at registration)
Tenant Name	Workday tenant identifier (subdomain in `{tenant}.workday.com`)
Base URL	(Optional) Workday services host override (see Tenant URLs setup step)

Info: Setup access in Workday. These steps require Integration System Administrator or Security Administrator privileges, or a colleague who can create API clients and edit domain security on your behalf.

OAuth 2.0 enabled on the tenant (Edit Tenant Setup - Security; confirm OAuth 2.0 clients are allowed)
Permission to run Register API Client for Integrations
Permission to create Integration System Users and Integration System Security Groups
Permission to edit Domain Security Policy Permissions and run Activate Pending Security Policy Changes

If you plan to enable user_activity_logging, search for Edit Tenant Setup - System and select Enable User Activity Logging before continuing. Workday starts retaining entries after the tenant feature is enabled; it does not backfill earlier activity.Complete Workday security setup before registering the API client. Workday evaluates API access from the Integration System User’s domain policies, not from the admin who registered the client.

Step 1: Create Integration System User

Search: Create Integration System User
Create a dedicated user (for example ISU_Parable_Integration)
Set a strong password and note the username
Enable Do Not Allow UI Sessions when available

This ISU is the authorization context for every API call Parable makes. The API client authenticates with client ID and secret; the ISU’s security group determines what data is returned.

Step 2: Create Integration System Security Group

Search: Create Security Group
Type: Integration System Security Group
Name: Parable Integration Security Group
Add your Integration System User as the only member
Save the group

Step 3: Grant Domain Security Permissions

Search: Domain Security Policy Permissions (or Domain Security for Functional Area).For each domain below, add your Integration System Security Group with Get or View access only. Do not grant Put, Post, or Modify.

Warning: Domain names vary by tenant and Workday release. Filter by functional area in Workday and search for the keywords below if the exact label differs.

Staffing

Domain (search keywords)	Used for
Worker Data: Public Worker Reports	Worker identity and public profile fields
Worker Data: Current Staffing Information	Job, employment, and manager fields on workers
Worker Data: All Positions	Positions tap
Recruiting / Job Requisitions (if separate in your tenant)	Job requisitions tap

Organizations and Roles

Domain (search keywords)	Used for
Organization and Roles	Organizations and supervisory organizations
Supervisory Organization	Org members and org chart child endpoints

Payroll

Domain (search keywords)	Used for
Payroll Input	Payroll inputs tap
Payment Election	Payment elections tap
Worker Pay Data / Pay Slips	Worker pay slips tap (traversed per worker)

Absence Management

Domain (search keywords)	Used for
Absence / Time Off Balances	Absence balances tap
Leave of Absence	Worker leaves of absence tap
Time Off	Time off details tap
Eligible Absence Types (if listed separately)	Worker eligible absence types tap

Time Tracking

Domain (search keywords)	Used for
Time Tracking / Worker Time Blocks	Worker time blocks tap

System

Domain (search keywords)	Used for
System Auditing	User Activity Logging tap

Step 4: Activate Security Changes

Search: Activate Pending Security Policy Changes
Review and submit

Domain permission edits are not live until activated. Skipping this step is a common cause of 403 Forbidden after credentials look correct.

Step 5: Register API Client

Search: Register API Client for Integrations
Fill in:

Field	Value
Client Name	`Parable Integration`
Client Grant Type	Client Credentials
Access Token Type	Bearer
Integration System User	The ISU from Step 1
Grant Administrative Consent	Checked (recommended; grants tenant-wide consent for selected functional areas)

On Scope (Functional Areas), enable each area needed by the streams you will use. Missing selections cause 403 errors on the affected endpoints.

Functional area (Scope)	Parable data
Staffing	Workers, positions, job requisitions
Organizations and Roles	Organizations, supervisory organizations, org members, org chart
Payroll	Payroll inputs, payment elections, worker pay slips
Absence Management (or Time Off and Leave)	Absence balances, leaves of absence, eligible absence types, time off details
Time Tracking	Worker time blocks
System	User Activity Logging

Info: Scope labels vary by tenant (for example Time Off and Leave instead of Absence Management). Some tenants also offer Include Workday Owned Scope for core domains outside standard functional areas; enable it only if Workday support recommends it for your tenant.

Info: Parable uses client credentials only. You do not need Manage Refresh Tokens for Integrations or a refresh token for this Provider.

Submit the form and copy the Client ID and Client Secret immediately.

Warning: The Client Secret is shown only once. If you lose it, use Generate New API Client Secret on the client (this invalidates the old secret).

Step 6: Confirm ISU Is Linked

If the ISU was not set during registration:

Search: Edit API Client for Integrations
Open Parable Integration
Set Integration System User to your ISU
Confirm Client Grant Type is Client Credentials

Step 7: Tenant URLs

Workday REST and OAuth URLs use the services host, not the UI login host (*.workday.com).

Environment	Example services host	Token endpoint
Sandbox (common)	`https://wd5-impl-services1.workday.com`	`.../ccx/oauth2/{tenant}/token`
Sandbox (WD501-style)	`https://services1.wd501.myworkday.com`	same path pattern
Production	`https://{tenant}-services1.workday.com` or `https://services1.myworkday.com`	same path pattern

Example workers probe:

https://wd5-impl-services1.workday.com/ccx/api/staffing/v7/YOUR_TENANT/workers

User Activity Logging uses the Privacy API path on the same configured services host:

https://YOUR_SERVICES_HOST/api/privacy/v1/YOUR_TENANT/activityLogging

Replace YOUR_TENANT with your tenant name. The connector’s default base URL is https://{tenant}.workday.com, while Workday REST tenants commonly require a services host. Confirm the REST host with your Workday administrator and enter it as Base URL when it differs from the default. A wrong host commonly returns 404 Not Found.

Step 8: Enter Values in Parable

In Parable, open the Workday Provider (REST API, not RaaS)
Enter Tenant Name, Client ID, and Client Secret
Enter Base URL only if your services host differs from Parable’s default
Click Save & test connection

Absence Balances

Developer identifier: absence_balancesAbsence Balances. Extracts absence/accrual balance records for workers from the Workday Absence Management REST API. Returns balance data per worker per absence type. Supports filtering by worker ID and effective date. Paginated via offset/limit with a default page size of 20 and max of 100. Full sync only; no incremental field documented.

Enables: Reconcile provider-reported leave balances to workers and absence types at the requested effective date.
Scope: Reads the records selected by Workday’s /ccx/api/absenceManagement/v2/{tenantName}/balances operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: absence_balances.descriptorDescriptor. Human-readable descriptor for the balance record. It gives the absence balance a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from absence_balances.descriptor for each absence balance; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each absence balance; it is not a stable identity. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Developer identifier: absence_balances.idID. Workday unique identifier for the balance record. It provides the reference needed to connect the absence balance to the corresponding provider object.

Enables: Match repeated absence balance entries on ID in absence_balances.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its absence balance namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Worker

Developer identifier: absence_balances.workerWorker. Worker reference (ID/descriptor/href) this balance belongs to. It preserves the nested context needed to interpret the parent absence balance.

Enables: Attribute worker in absence_balances.worker to the parent absence balance; identify parent records where that nested worker object is absent.
Interpretation: Workday reports worker as a nested object on each absence balance; optional children may be absent from a valid response. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Descriptor

Developer identifier: absence_balances.worker.descriptorDescriptor. Display name of the worker. It gives the worker a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from absence_balances.worker.descriptor for each worker; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker; it is not a stable identity. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Href

Developer identifier: absence_balances.worker.hrefHref. API URL to the worker resource. It locates the provider resource or path associated with the worker.

Enables: Associate each worker with the resource identified by href in absence_balances.worker.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Developer identifier: absence_balances.worker.idID. Workday ID of the worker. It provides the reference needed to connect the absence balance to the corresponding provider object.

Enables: Connect each worker in Absence Balances to the referenced worker through absence_balances.worker.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its worker namespace; it is not a universal identity outside Workday. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Job Requisitions

Developer identifier: job_requisitionsJob Requisitions. Extracts all job requisition records from the Workday Staffing REST API. Job requisitions represent approved requests to fill positions. Paginated via offset/limit. Full sync only.

Enables: Match each approved hiring request to its Workday requisition identity and descriptor for recruiting-record completeness.
Scope: Reads the records selected by Workday’s /ccx/api/staffing/v7/{tenantName}/jobRequisitions operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: job_requisitions.descriptorDescriptor. Human-readable name/descriptor for the job requisition. It gives the job requisition a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from job_requisitions.descriptor for each job requisition; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each job requisition; it is not a stable identity.

Developer identifier: job_requisitions.idID. Workday unique identifier for the job requisition. It provides the reference needed to connect the job requisition to the corresponding provider object.

Enables: Match repeated job requisition entries on ID in job_requisitions.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its job requisition namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.

Org Chart

Developer identifier: org_chartOrg Chart. Organization chart for a supervisory organization.

Enables: Reconstruct the organization-chart entries returned for each supervisory organization and retain their parent organization reference.
Scope: Reads the records selected by Workday’s /ccx/api/staffing/v7/{tenantName}/supervisoryOrganizations/{org_id}/orgChart operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: org_chart.descriptorDescriptor. The provider-reported descriptor for each org chart in Org Chart. It gives the org chart a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from org_chart.descriptor for each org chart; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each org chart; it is not a stable identity.

Developer identifier: org_chart.idID. The provider-reported ID for each org chart in Org Chart. It provides the reference needed to connect the org chart to the corresponding provider object.

Enables: Match repeated org chart entries on ID in org_chart.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its org chart namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.

Org ID

Developer identifier: org_chart.org_idOrg ID. Parent org reference copied into each org chart because the child operation does not return that relationship. It provides the reference needed to connect the org chart to the corresponding provider object.

Enables: Connect each org chart in Org Chart to the referenced org through org_chart.org_id; flag org ID values that do not resolve in that provider namespace.
Interpretation: Parable copies org ID from the parent traversal record into each org chart; the child Workday operation does not return it.

Org Members

Developer identifier: org_membersOrg Members. Members of a supervisory organization.

Enables: Match each supervisory organization to the worker-members returned by its child membership operation.
Scope: Reads the records selected by Workday’s /ccx/api/staffing/v7/{tenantName}/supervisoryOrganizations/{org_id}/members operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: org_members.descriptorDescriptor. Preview of the job/membership instance. It gives the org member a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from org_members.descriptor for each org member; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each org member; it is not a stable identity. This is provider-authored review context, not an independent Parable assessment of employee performance.

Developer identifier: org_members.idID. Job/position membership instance ID (not the worker ID). It provides the reference needed to connect the org member to the corresponding provider object.

Enables: Match repeated org member entries on ID in org_members.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its org member namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.

Org ID

Developer identifier: org_members.org_idOrg ID. Parent org reference copied into each org member because the child operation does not return that relationship. It provides the reference needed to connect the org member to the corresponding provider object.

Enables: Connect each org member in Org Members to the referenced org through org_members.org_id; flag org ID values that do not resolve in that provider namespace.
Interpretation: Parable copies org ID from the parent traversal record into each org member; the child Workday operation does not return it.

Worker

Developer identifier: org_members.workerWorker. Worker filling this membership position. Foreign-key projection emits worker_id (JobData.worker.ID) on the root table for identity AccountId. It preserves the nested context needed to interpret the parent org member.

Enables: Attribute worker in org_members.worker to the parent org member; identify parent records where that nested worker object is absent.
Interpretation: Workday reports worker as a nested object on each org member; optional children may be absent from a valid response. A connector directive maps this field to account identity.

Descriptor

Developer identifier: org_members.worker.descriptorDescriptor. Worker display name. It gives the org member worker ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from org_members.OrgMemberWorkerRef.descriptor for each org member worker ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each org member worker ref; it is not a stable identity. A connector directive maps this field to a person’s display name.

Developer identifier: org_members.worker.idID. Workday worker ID (WID). It provides the reference needed to connect the org member to the corresponding provider object.

Enables: Connect each org member worker ref in Org Members to the referenced org member worker ref through org_members.OrgMemberWorkerRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its org member worker ref namespace; it is not a universal identity outside Workday.

Organizations

Developer identifier: organizationsOrganizations. Extracts all organization records from the Workday Staffing REST API. Organizations represent supervisory, cost center, company, and other org structures. Paginated via offset/limit. Full sync only.

Enables: Inventory Workday organization records and distinguish supervisory, cost-center, company, and other organization identities.
Scope: Reads the records selected by Workday’s /ccx/api/staffing/v7/{tenantName}/organizations operation as a snapshot stream using full synchronization. Visibility follows the Workday integration system user’s domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: organizations.descriptorDescriptor. Human-readable name/descriptor for the organization. It gives the organization a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from organizations.descriptor for each organization; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each organization; it is not a stable identity.

Developer identifier: organizations.idID. Workday unique identifier for the organization. It provides the reference needed to connect the organization to the corresponding provider object.

Enables: Match repeated organization entries on ID in organizations.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its organization namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.

Payment Elections

Developer identifier: payment_electionsPayment Elections. Payment election rules from the Payroll API.

Enables: Confirm which provider-reported payment election record belongs to each worker.
Scope: Reads the records selected by Workday’s /ccx/api/payroll/v2/{tenantName}/paymentElections operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized workforce and payroll reconciliation; the records are not invoices and do not support performance inference. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: payment_elections.descriptorDescriptor. The provider-reported descriptor for each payment election in Payment Elections. It gives the payment election a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payment_elections.descriptor for each payment election; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each payment election; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payment_elections.idID. The provider-reported ID for each payment election in Payment Elections. It provides the reference needed to connect the payment election to the corresponding provider object.

Enables: Match repeated payment election entries on ID in payment_elections.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its payment election namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Worker

Developer identifier: payment_elections.workerWorker. The structured worker details attached to each payment election in Payment Elections. It preserves the nested context needed to interpret the parent payment election.

Enables: Attribute worker in payment_elections.worker to the parent payment election; identify parent records where that nested worker object is absent.
Interpretation: Workday reports worker as a nested object on each payment election; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Payroll Inputs

Developer identifier: payroll_inputsPayroll Inputs. Payroll input records from the Payroll API.

Enables: Reconcile payroll adjustments to the worker, pay component, pay period, currency, and effective dates.
Scope: Reads the records selected by Workday’s /ccx/api/payroll/v2/{tenantName}/payrollInputs operation as an event stream using incremental synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized workforce and payroll reconciliation; the records are not invoices and do not support performance inference. This stream supplies no reliable deletion signal.

Additional Data

Developer identifier: payroll_inputs.additionalDataAdditional Data. Additional custom data fields associated with the payroll input. It preserves the nested context needed to interpret the parent payroll input.

Enables: Compare the exact Workday-configured additional data set in payroll_inputs.additionalData for each payroll input; preserve provider labels and unknown entries.
Interpretation: Workday returns additional data as an array of additional data entry entries on each payroll input; missing, empty, and permission-redacted arrays are not equivalent. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.additionalData.descriptorDescriptor. Display name of the additional data field. It gives the additional data entry a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.AdditionalDataEntry.descriptor for each additional data entry; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each additional data entry; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.additionalData.idID. Identifier for the additional data field. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Match repeated additional data entry entries on ID in payroll_inputs.AdditionalDataEntry.id; it is not a declared deduplication key, so entries stay keyed by their position in the array.
Interpretation: Workday reports ID as an identifier in its additional data entry namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Value

Developer identifier: payroll_inputs.additionalData.valueValue. Value of the additional data field. It must be interpreted with the enclosing provider field name, type, or custom schema for the additional data entry.

Enables: Interpret payroll_inputs.AdditionalDataEntry.value with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Workday reports value under the enclosing custom or typed field contract on each additional data entry; compare it only with values from the same provider key and type. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Amount

Developer identifier: payroll_inputs.amountAmount. Monetary amount of the payroll input. It supplies the amount measure for the payroll input at the provider’s declared unit and grain.

Enables: Reconcile amount in payroll_inputs.amount by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports amount as a number at the parent record’s grain on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Comment

Developer identifier: payroll_inputs.commentComment. Free-text comment or note associated with the payroll input. It defines the content surface available for this payroll input.

Enables: Locate payroll input records by comment in payroll_inputs.comment; attribute each text match to its parent payroll input and, when present, its reported author.
Interpretation: Workday supplies comment as text on each payroll input; referenced files or media are not implied unless explicitly represented. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Company

Developer identifier: payroll_inputs.companyCompany. Reference to the company (legal entity) under which this payroll input is processed. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute company in payroll_inputs.company to the parent payroll input; identify parent records where that nested company object is absent.
Interpretation: Workday reports company as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.company.descriptorDescriptor. Display name of the company. It gives the company reference a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.CompanyReference.descriptor for each company reference; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each company reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.company.hrefHref. API URL to the company resource. It locates the provider resource or path associated with the company reference.

Enables: Associate each company reference with the resource identified by href in payroll_inputs.CompanyReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each company reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.company.idID. Unique Workday ID of the company. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each company reference in Payroll Inputs to the referenced company reference through payroll_inputs.CompanyReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its company reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Cost Center

Developer identifier: payroll_inputs.costCenterCost Center. Reference to the cost center for allocation of this payroll input. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute cost center in payroll_inputs.costCenter to the parent payroll input; identify parent records where that nested cost center object is absent.
Interpretation: Workday reports cost center as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.costCenter.descriptorDescriptor. Display name of the cost center. It gives the cost center reference a human-readable provider label while its identifier remains the stable reference.

Enables: Reconcile descriptor in payroll_inputs.CostCenterReference.descriptor by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports descriptor on each cost center reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Href

Developer identifier: payroll_inputs.costCenter.hrefHref. API URL to the cost center resource. It locates the provider resource or path associated with the cost center reference.

Enables: Associate each cost center reference with the resource identified by href in payroll_inputs.CostCenterReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each cost center reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.costCenter.idID. Unique Workday ID of the cost center. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each cost center reference in Payroll Inputs to the referenced cost center reference through payroll_inputs.CostCenterReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its cost center reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Created By

Developer identifier: payroll_inputs.createdByCreated By. Reference to the user who created the payroll input. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute created by in payroll_inputs.createdBy to the parent payroll input; identify parent records where that nested created by object is absent.
Interpretation: Workday reports created by as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.createdBy.descriptorDescriptor. Display name or descriptor of the worker. It gives the worker reference a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.WorkerReference.descriptor for each worker reference; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.createdBy.hrefHref. API URL to the worker resource. It locates the provider resource or path associated with the worker reference.

Enables: Associate each worker reference with the resource identified by href in payroll_inputs.WorkerReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each worker reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.createdBy.idID. Unique Workday ID of the worker. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each worker reference in Payroll Inputs to the referenced worker reference through payroll_inputs.WorkerReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its worker reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Created On

Developer identifier: payroll_inputs.createdOnCreated On. Timestamp when the payroll input was created. It anchors the payroll input on the provider’s reported timeline.

Enables: Order Payroll Inputs by created on in payroll_inputs.createdOn and isolate records inside an exact provider reporting window.
Interpretation: Workday reports created on as a timestamp on each payroll input; timezone and precision follow this API field, and absence is not an inferred event time. The schema designates this field as the event timestamp. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Currency

Developer identifier: payroll_inputs.currencyCurrency. Currency in which the payroll input amount is denominated. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute currency in payroll_inputs.currency to the parent payroll input; identify parent records where that nested currency object is absent.
Interpretation: Workday reports currency as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.currency.descriptorDescriptor. Display name of the currency (e.g., US Dollar). It gives the currency reference a human-readable provider label while its identifier remains the stable reference.

Enables: Reconcile descriptor in payroll_inputs.CurrencyReference.descriptor by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports descriptor on each currency reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Href

Developer identifier: payroll_inputs.currency.hrefHref. API URL to the currency resource. It locates the provider resource or path associated with the currency reference.

Enables: Associate each currency reference with the resource identified by href in payroll_inputs.CurrencyReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each currency reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.currency.idID. ISO 4217 currency code or Workday currency ID. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each currency reference in Payroll Inputs to the referenced currency reference through payroll_inputs.CurrencyReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its currency reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Deduction Code

Developer identifier: payroll_inputs.deductionCodeDeduction Code. Reference to the deduction code, if this payroll input is a deduction. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute deduction code in payroll_inputs.deductionCode to the parent payroll input; identify parent records where that nested deduction code object is absent.
Interpretation: Workday reports deduction code as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.deductionCode.descriptorDescriptor. Display name of the deduction code. It gives the deduction code reference a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.DeductionCodeReference.descriptor for each deduction code reference; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each deduction code reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.deductionCode.hrefHref. API URL to the deduction code resource. It locates the provider resource or path associated with the deduction code reference.

Enables: Associate each deduction code reference with the resource identified by href in payroll_inputs.DeductionCodeReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each deduction code reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.deductionCode.idID. Unique Workday ID of the deduction code. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each deduction code reference in Payroll Inputs to the referenced deduction code reference through payroll_inputs.DeductionCodeReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its deduction code reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Descriptor

Developer identifier: payroll_inputs.descriptorDescriptor. Human-readable description of the payroll input, identifying the type of payroll adjustment. It supplies the returned descriptor text needed to understand the payroll input in context.

Enables: Reconcile descriptor in payroll_inputs.descriptor by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports descriptor on each payroll input; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Earning Code

Developer identifier: payroll_inputs.earningCodeEarning Code. Reference to the earning code, if this payroll input is an earning. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute earning code in payroll_inputs.earningCode to the parent payroll input; identify parent records where that nested earning code object is absent.
Interpretation: Workday reports earning code as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.earningCode.descriptorDescriptor. Display name of the earning code. It gives the earning code reference a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.EarningCodeReference.descriptor for each earning code reference; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each earning code reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.earningCode.hrefHref. API URL to the earning code resource. It locates the provider resource or path associated with the earning code reference.

Enables: Associate each earning code reference with the resource identified by href in payroll_inputs.EarningCodeReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each earning code reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.earningCode.idID. Unique Workday ID of the earning code. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each earning code reference in Payroll Inputs to the referenced earning code reference through payroll_inputs.EarningCodeReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its earning code reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

End Date

Developer identifier: payroll_inputs.endDateEnd Date. End date for the payroll input effective period. It anchors the payroll input on the provider’s reported timeline.

Enables: Filter Payroll Inputs by end date in payroll_inputs.endDate; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Workday reports end date as a calendar date on each payroll input; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Frequency Behavior

Developer identifier: payroll_inputs.frequencyBehaviorFrequency Behavior. Frequency behavior indicating how the input recurs across pay periods. It distinguishes the provider-defined frequency behavior state or classification for the payroll input.

Enables: Reconcile frequency behavior in payroll_inputs.frequencyBehavior by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports frequency behavior as a label from its own taxonomy on each payroll input; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Hours

Developer identifier: payroll_inputs.hoursHours. Number of hours associated with the payroll input, if applicable. It supplies the hours measure for the payroll input at the provider’s declared unit and grain.

Enables: Reconcile hours in payroll_inputs.hours by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports hours as hours on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Href

Developer identifier: payroll_inputs.hrefHref. API URL to the full payroll input resource. It locates the provider resource or path associated with the payroll input.

Enables: Associate each payroll input with the resource identified by href in payroll_inputs.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each payroll input; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.idID. Unique identifier for the payroll input record. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Match repeated payroll input entries on ID in payroll_inputs.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its payroll input namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Input Status

Developer identifier: payroll_inputs.inputStatusInput Status. Current processing status of the payroll input. It distinguishes the provider-defined input status state or classification for the payroll input.

Enables: Reconcile input status in payroll_inputs.inputStatus by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports input status as a label from its own taxonomy on each payroll input; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Last Updated

Developer identifier: payroll_inputs.lastUpdatedLast Updated. Timestamp when the payroll input was last modified. It anchors the payroll input on the provider’s reported timeline.

Enables: Order Payroll Inputs by last updated in payroll_inputs.lastUpdated and isolate records inside an exact provider reporting window.
Interpretation: Workday reports last updated as a timestamp on each payroll input; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Pay Component

Developer identifier: payroll_inputs.payComponentPay Component. Reference to the pay component (earning, deduction, or other pay element) for this input. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute pay component in payroll_inputs.payComponent to the parent payroll input; identify parent records where that nested pay component object is absent.
Interpretation: Workday reports pay component as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Category

Developer identifier: payroll_inputs.payComponent.categoryCategory. Category of the pay component (e.g., earning, deduction, tax). It identifies the related provider object that gives the pay component reference its parent, owner, or container context.

Enables: Reconcile category in payroll_inputs.PayComponentReference.category by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports category as a label from its own taxonomy on each pay component reference; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.payComponent.descriptorDescriptor. Display name of the pay component. It gives the pay component reference a human-readable provider label while its identifier remains the stable reference.

Enables: Reconcile descriptor in payroll_inputs.PayComponentReference.descriptor by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports descriptor on each pay component reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Href

Developer identifier: payroll_inputs.payComponent.hrefHref. API URL to the pay component resource. It locates the provider resource or path associated with the pay component reference.

Enables: Associate each pay component reference with the resource identified by href in payroll_inputs.PayComponentReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each pay component reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.payComponent.idID. Unique Workday ID of the pay component. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each pay component reference in Payroll Inputs to the referenced pay component reference through payroll_inputs.PayComponentReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its pay component reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Pay Period

Developer identifier: payroll_inputs.payPeriodPay Period. Reference to the specific pay period this input applies to. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute pay period in payroll_inputs.payPeriod to the parent payroll input; identify parent records where that nested pay period object is absent.
Interpretation: Workday reports pay period as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.payPeriod.descriptorDescriptor. Display name of the pay period. It gives the pay period reference a human-readable provider label while its identifier remains the stable reference.

Enables: Reconcile descriptor in payroll_inputs.PayPeriodReference.descriptor by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports descriptor on each pay period reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

End Date

Developer identifier: payroll_inputs.payPeriod.endDateEnd Date. End date of the pay period. It anchors the payroll input on the provider’s reported timeline.

Enables: Filter Payroll Inputs by end date in payroll_inputs.PayPeriodReference.endDate; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Workday reports end date as a calendar date on each pay period reference; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.payPeriod.hrefHref. API URL to the pay period resource. It locates the provider resource or path associated with the pay period reference.

Enables: Associate each pay period reference with the resource identified by href in payroll_inputs.PayPeriodReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each pay period reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.payPeriod.idID. Unique Workday ID of the pay period. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each pay period reference in Payroll Inputs to the referenced pay period reference through payroll_inputs.PayPeriodReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its pay period reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Start Date

Developer identifier: payroll_inputs.payPeriod.startDateStart Date. Start date of the pay period. It anchors the payroll input on the provider’s reported timeline.

Enables: Filter Payroll Inputs by start date in payroll_inputs.PayPeriodReference.startDate; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Workday reports start date as a calendar date on each pay period reference; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Payroll Input Type

Developer identifier: payroll_inputs.payrollInputTypePayroll Input Type. Type classification of the payroll input (one-time vs recurring). It distinguishes the provider-defined payroll input type state or classification for the payroll input.

Enables: Reconcile payroll input type in payroll_inputs.payrollInputType by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports payroll input type as a label from its own taxonomy on each payroll input; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Percentage

Developer identifier: payroll_inputs.percentagePercentage. Percentage value if the payroll input is percentage-based. It supplies the percentage measure for the payroll input at the provider’s declared unit and grain.

Enables: Reconcile percentage in payroll_inputs.percentage by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports percentage as the provider’s percentage scale on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Position

Developer identifier: payroll_inputs.positionPosition. Reference to the position associated with this payroll input. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute position in payroll_inputs.position to the parent payroll input; identify parent records where that nested position object is absent.
Interpretation: Workday reports position as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.position.descriptorDescriptor. Display name of the position. It gives the position reference a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.PositionReference.descriptor for each position reference; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each position reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.position.hrefHref. API URL to the position resource. It locates the provider resource or path associated with the position reference.

Enables: Associate each position reference with the resource identified by href in payroll_inputs.PositionReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each position reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.position.idID. Unique Workday ID of the position. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each position reference in Payroll Inputs to the referenced position reference through payroll_inputs.PositionReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its position reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Rate

Developer identifier: payroll_inputs.rateRate. Rate value for the payroll input (e.g., hourly rate override). It supplies the rate measure for the payroll input at the provider’s declared unit and grain.

Enables: Reconcile rate in payroll_inputs.rate by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports rate as a number at the parent record’s grain on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Start Date

Developer identifier: payroll_inputs.startDateStart Date. Start date for the payroll input effective period. It anchors the payroll input on the provider’s reported timeline.

Enables: Filter Payroll Inputs by start date in payroll_inputs.startDate; pair that boundary with the corresponding end before measuring elapsed time.
Interpretation: Workday reports start date as a calendar date on each payroll input; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Tax Code

Developer identifier: payroll_inputs.taxCodeTax Code. Reference to the tax code, if this payroll input is a tax override. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute tax code in payroll_inputs.taxCode to the parent payroll input; identify parent records where that nested tax code object is absent.
Interpretation: Workday reports tax code as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.taxCode.descriptorDescriptor. Display name of the tax code. It gives the tax code reference a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.TaxCodeReference.descriptor for each tax code reference; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each tax code reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.taxCode.hrefHref. API URL to the tax code resource. It locates the provider resource or path associated with the tax code reference.

Enables: Associate each tax code reference with the resource identified by href in payroll_inputs.TaxCodeReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each tax code reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.taxCode.idID. Unique Workday ID of the tax code. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Connect each tax code reference in Payroll Inputs to the referenced tax code reference through payroll_inputs.TaxCodeReference.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its tax code reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Units

Developer identifier: payroll_inputs.unitsUnits. Number of units for the payroll input, if applicable. It supplies the units boundary, band, or unit needed to interpret the companion measure.

Enables: Reconcile units in payroll_inputs.units by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports units as a count at the parent record’s grain on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Worker

Developer identifier: payroll_inputs.workerWorker. Reference to the worker associated with this payroll input. It preserves the nested context needed to interpret the parent payroll input.

Enables: Attribute worker in payroll_inputs.worker to the parent payroll input; identify parent records where that nested worker object is absent.
Interpretation: Workday reports worker as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Worktag

Developer identifier: payroll_inputs.worktagWorktag. Worktags associated with this payroll input for cost allocation and reporting. It preserves the nested context needed to interpret the parent payroll input.

Enables: Compare the exact Workday-configured worktag set in payroll_inputs.worktag for each payroll input; preserve provider labels and unknown entries.
Interpretation: Workday returns worktag as an array of worktag reference entries on each payroll input; missing, empty, and permission-redacted arrays are not equivalent. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: payroll_inputs.worktag.descriptorDescriptor. Display name of the worktag. It gives the worktag reference a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from payroll_inputs.WorktagReference.descriptor for each worktag reference; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worktag reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Href

Developer identifier: payroll_inputs.worktag.hrefHref. API URL to the worktag resource. It locates the provider resource or path associated with the worktag reference.

Enables: Associate each worktag reference with the resource identified by href in payroll_inputs.WorktagReference.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each worktag reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: payroll_inputs.worktag.idID. Unique Workday ID of the worktag. It provides the reference needed to connect the payroll input to the corresponding provider object.

Enables: Match repeated worktag reference entries on ID in payroll_inputs.WorktagReference.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its worktag reference namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Positions

Developer identifier: positionsPositions. Extracts all position records (open and filled) from the Workday Staffing REST API. Positions represent authorized headcount slots within the organization. Paginated via offset/limit. Full sync only.

Enables: Reconcile open and filled headcount positions to their Workday identity and descriptor for workforce planning.
Scope: Reads the records selected by Workday’s /ccx/api/staffing/v7/{tenantName}/positions operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: positions.descriptorDescriptor. Human-readable name/descriptor for the position. It gives the position a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from positions.descriptor for each position; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each position; it is not a stable identity.

Developer identifier: positions.idID. Workday unique identifier for the position. It provides the reference needed to connect the position to the corresponding provider object.

Enables: Match repeated position entries on ID in positions.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its position namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.

Supervisory Organizations

Developer identifier: supervisory_organizationsSupervisory Organizations. Supervisory organization hierarchy from the Staffing API.

Enables: Reconstruct supervisory organization hierarchy and connect each organization to its manager and parent references.
Scope: Reads the records selected by Workday’s /ccx/api/staffing/v7/{tenantName}/supervisoryOrganizations operation as a snapshot stream using full synchronization. Visibility follows the Workday integration system user’s domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: supervisory_organizations.descriptorDescriptor. Display name of the supervisory organization. It gives the supervisory organization a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from supervisory_organizations.descriptor for each supervisory organization; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each supervisory organization; it is not a stable identity.

Developer identifier: supervisory_organizations.idID. Unique Workday ID for the supervisory organization. It provides the reference needed to connect the supervisory organization to the corresponding provider object.

Enables: Match repeated supervisory organization entries on ID in supervisory_organizations.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its supervisory organization namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.

Manager

Developer identifier: supervisory_organizations.managerManager. Manager reference for this supervisory organization (ID/descriptor/href). It preserves the nested context needed to interpret the parent supervisory organization.

Enables: Attribute manager in supervisory_organizations.manager to the parent supervisory organization; identify parent records where that nested manager object is absent.
Interpretation: Workday reports manager as a nested object on each supervisory organization; optional children may be absent from a valid response.

Descriptor

Developer identifier: supervisory_organizations.manager.descriptorDescriptor. Display name of the manager. It gives the manager a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from supervisory_organizations.manager.descriptor for each manager; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each manager; it is not a stable identity.

Href

Developer identifier: supervisory_organizations.manager.hrefHref. API URL to the manager worker resource. It locates the provider resource or path associated with the manager.

Enables: Associate each manager with the resource identified by href in supervisory_organizations.manager.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each manager; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: supervisory_organizations.manager.idID. Workday ID of the manager worker. It provides the reference needed to connect the supervisory organization to the corresponding provider object.

Enables: Connect each manager in Supervisory Organizations to the referenced manager through supervisory_organizations.manager.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its manager namespace; it is not a universal identity outside Workday.

Superior

Developer identifier: supervisory_organizations.superiorSuperior. Parent supervisory organization reference (public Staffing docs use superior). It preserves the nested context needed to interpret the parent supervisory organization.

Enables: Attribute superior in supervisory_organizations.superior to the parent supervisory organization; identify parent records where that nested superior object is absent.
Interpretation: Workday reports superior as a nested object on each supervisory organization; optional children may be absent from a valid response.

Descriptor

Developer identifier: supervisory_organizations.superior.descriptorDescriptor. Display name of the superior organization. It gives the superior a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from supervisory_organizations.superior.descriptor for each superior; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each superior; it is not a stable identity.

Href

Developer identifier: supervisory_organizations.superior.hrefHref. API URL to the superior organization resource. It locates the provider resource or path associated with the superior.

Enables: Associate each superior with the resource identified by href in supervisory_organizations.superior.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each superior; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: supervisory_organizations.superior.idID. Workday ID of the superior organization. It provides the reference needed to connect the supervisory organization to the corresponding provider object.

Enables: Connect each superior in Supervisory Organizations to the referenced superior through supervisory_organizations.superior.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its superior namespace; it is not a universal identity outside Workday.

Time Off Details

Developer identifier: time_off_detailsTime Off Details. Time off detail records per worker from the Absence Management API.

Enables: Match time-off details to workers and effective records for leave administration.
Scope: Reads the records selected by Workday’s /ccx/api/absenceManagement/v2/{tenantName}/workers/{worker_id}/timeOffDetails operation as an event stream using incremental synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. This stream supplies no reliable deletion signal.

Descriptor

Developer identifier: time_off_details.descriptorDescriptor. The provider-reported descriptor for each time off detail in Time Off Details. It gives the time off detail a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from time_off_details.descriptor for each time off detail; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each time off detail; it is not a stable identity. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Developer identifier: time_off_details.idID. The provider-reported ID for each time off detail in Time Off Details. It provides the reference needed to connect the time off detail to the corresponding provider object.

Enables: Match repeated time off detail entries on ID in time_off_details.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its time off detail namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Worker

Developer identifier: time_off_details.workerWorker. The structured worker details attached to each time off detail in Time Off Details. It preserves the nested context needed to interpret the parent time off detail.

Enables: Attribute worker in time_off_details.worker to the parent time off detail; identify parent records where that nested worker object is absent.
Interpretation: Workday reports worker as a nested object on each time off detail; optional children may be absent from a valid response. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Worker ID

Developer identifier: time_off_details.worker_idWorker ID. Parent worker reference copied into each time off detail because the child operation does not return that relationship. It provides the reference needed to connect the time off detail to the corresponding provider object.

Enables: Connect each time off detail in Time Off Details to the referenced worker through time_off_details.worker_id; flag worker ID values that do not resolve in that provider namespace.
Interpretation: Parable copies worker ID from the parent traversal record into each time off detail; the child Workday operation does not return it. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

User Activity Logging

Developer identifier: user_activity_loggingUser Activity Logging. Workday user activity entries for tasks, reports, and other recorded tenant actions.

Enables: Correlate a provider-recorded action with its system account, session, task, target, client context, and request time.
Scope: Incrementally reads GET /api/privacy/v1/{tenantName}/activityLogging in one-day UTC windows. This stream is opt-in and visibility follows the API client’s System functional area and the integration user’s System Auditing access. Workday retains about 30 days, can omit targets, and does not record every mouse click or action duration. These entries do not establish intent, productive time, or employee performance.

Synthetic event key

Developer identifier: user_activity_logging._synthetic_primary_keySynthetic event key. Identifies an ingested Workday activity entry when the provider supplies no event ID.

Enables: Deduplicate replayed records using a SHA-256 digest of the account, request time, task, session, action, and target ID.
Interpretation: Parable computes this value during ingestion. Exact provider payloads with the same key inputs are indistinguishable, so this key does not prove Workday assigned a unique event identity.

Activity action

Developer identifier: user_activity_logging.activityActionActivity action. States the action category Workday recorded for the activity entry.

Enables: Separate provider-reported READ, WRITE, DOWNLOAD, and OTHER activity when reviewing task or report use.
Interpretation: This is Workday’s action category. It does not establish user intent, control effectiveness, or employee performance.

Device type

Developer identifier: user_activity_logging.deviceTypeDevice type. Gives Workday’s device category for the sign-on used by the request.

Enables: Compare activity entries by the provider-reported device category when investigating access patterns.
Interpretation: This is a Workday classification from sign-on context, not a verified device identity or inventory record.

IP address

Developer identifier: user_activity_logging.ipAddressIP address. Reports the network address from the user sign-on used for the request.

Enables: Correlate Workday activity with authorized network and access records during an investigation.
Interpretation: Workday reports this sign-on attribute. Proxies, VPNs, shared networks, and address reuse mean it does not establish a person’s identity or physical location.

Request time

Developer identifier: user_activity_logging.requestTimeRequest time. Records when Workday received the activity request in UTC.

Enables: Order activity entries, select incremental collection windows, and correlate actions with other time-bounded records.
Interpretation: Workday reports this event timestamp with millisecond precision in examples. It is not a duration or proof of how long a user worked.

Session ID

Developer identifier: user_activity_logging.sessionIdSession ID. Identifies the Workday sign-on session associated with the recorded request.

Enables: Correlate entries that Workday associates with the same sign-on session.
Interpretation: A session can contain many actions and does not identify a unique event, person, or duration of productive work.

System account

Developer identifier: user_activity_logging.systemAccountSystem account. Names the Workday account that initiated the recorded request.

Enables: Attribute the activity entry to the provider-reported account handle and compare it with separately verified Workday identities.
Interpretation: Workday reports a mutable account handle, not a guaranteed email address or Worker ID. Shared and integration accounts may represent more than one person or process.

Target

Developer identifier: user_activity_logging.targetTarget. References the Workday object on which the recorded action was executed.

Enables: Correlate an activity entry with its provider target ID and show the returned target label when present.
Interpretation: Workday can omit the target. Its descriptor can contain personal information and remains provider-controlled display text.

Target descriptor

Developer identifier: user_activity_logging.target.descriptorTarget descriptor. Gives the activity target a human-readable Workday label.

Enables: Display the object named by Target ID when reviewing a recorded action.
Interpretation: Workday controls this mutable text, and it can contain personal information. It is not a stable target identity.

Target link

Developer identifier: user_activity_logging.target.hrefTarget link. Locates the referenced Workday object when the API returns a resource link.

Enables: Open or reconcile the activity target through its provider URL when the caller remains authorized.
Interpretation: Workday may omit this link, and access still depends on the current viewer’s permissions. The URL can change with tenant routing.

Target ID

Developer identifier: user_activity_logging.target.idTarget ID. Identifies the Workday object on which the action was executed.

Enables: Match the activity target to the same Workday object in another authorized source when its namespace is known.
Interpretation: Workday reports this identifier in the target object’s provider namespace. It is not universally unique outside Workday.

Task display name

Developer identifier: user_activity_logging.taskDisplayNameTask display name. Gives the recorded Workday task a human-readable label.

Enables: Display and review activity by the task or report name Workday returned with the entry.
Interpretation: Workday controls this mutable display text. Use Task ID when a stable provider reference is required.

Task ID

Developer identifier: user_activity_logging.taskIdTask ID. Identifies the Workday task executed in the recorded transaction.

Enables: Group activity entries by Workday task and match them to task metadata obtained from authorized Workday sources.
Interpretation: Workday reports this identifier in its task namespace. It is not a Parable or Worker identity.

User agent

Developer identifier: user_activity_logging.userAgentUser agent. Contains the browser and operating-system text Workday recorded for the sign-on.

Enables: Correlate activity entries with client software reported in other authorized access records.
Interpretation: User-agent text is client supplied, mutable, and may be absent or spoofed. It does not verify a device or user.

Worker Eligible Absence Types

Developer identifier: worker_eligible_absence_typesWorker Eligible Absence Types. Extracts the absence/leave types that each worker is eligible for, from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Useful for understanding leave entitlements and work taxonomy. One call per worker ID.

Enables: Confirm which provider-defined leave types Workday reports as eligible for each worker.
Scope: Reads the records selected by Workday’s /ccx/api/absenceManagement/v2/{tenantName}/workers/{worker_id}/eligibleAbsenceTypes operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: worker_eligible_absence_types.descriptorDescriptor. Human-readable name/descriptor for the eligible absence type. It gives the worker eligible absence type a human-readable provider label while its identifier remains the stable reference.

Enables: Match descriptor in worker_eligible_absence_types.descriptor to the relevant worker, leave type, unit, and effective date for authorized leave administration.
Interpretation: Workday reports descriptor on each worker eligible absence type; missing and empty values can have different meanings. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Developer identifier: worker_eligible_absence_types.idID. Workday unique identifier for the eligible absence type. It provides the reference needed to connect the worker eligible absence type to the corresponding provider object.

Enables: Match repeated worker eligible absence type entries on ID in worker_eligible_absence_types.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its worker eligible absence type namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Worker ID

Developer identifier: worker_eligible_absence_types.worker_idWorker ID. Parent worker reference copied into each worker eligible absence type because the child operation does not return that relationship. It provides the reference needed to connect the worker eligible absence type to the corresponding provider object.

Enables: Connect each worker eligible absence type in Worker Eligible Absence Types to the referenced worker through worker_eligible_absence_types.worker_id; flag worker ID values that do not resolve in that provider namespace.
Interpretation: Parable copies worker ID from the parent traversal record into each worker eligible absence type; the child Workday operation does not return it. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Worker Leaves Of Absence

Developer identifier: worker_leaves_of_absenceWorker Leaves Of Absence. Extracts leave-of-absence records for each worker from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Returns leave records with fields including effectiveDate, dateOfFirstAbsence, stopPaymentDate, singleParentIndicator, multipleChildIndicator, and childsDateOfDeath. Traversal is required: one call per worker ID obtained from the workers tap.

Enables: Match leave records to workers and effective dates for narrow workforce-availability reconciliation.
Scope: Reads the records selected by Workday’s /ccx/api/absenceManagement/v2/{tenantName}/workers/{worker_id}/leavesOfAbsence operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. A later complete read can treat a previously seen record that is absent as removed.

Childs Date Of Death

Developer identifier: worker_leaves_of_absence.childsDateOfDeathChilds Date Of Death. Date of death of a child, if applicable to the leave reason. It anchors the worker leave-of-absence records on the provider’s reported timeline.

Enables: Match childs date of death in worker_leaves_of_absence.childsDateOfDeath to the relevant worker, leave type, unit, and effective date for authorized leave administration.
Interpretation: Workday reports childs date of death as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Date Of First Absence

Developer identifier: worker_leaves_of_absence.dateOfFirstAbsenceDate Of First Absence. The date of the first absence in this leave. It anchors the worker leave-of-absence records on the provider’s reported timeline.

Enables: Match date of first absence in worker_leaves_of_absence.dateOfFirstAbsence to the relevant worker, leave type, unit, and effective date for authorized leave administration.
Interpretation: Workday reports date of first absence as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Descriptor

Developer identifier: worker_leaves_of_absence.descriptorDescriptor. Human-readable descriptor for the leave of absence. It gives the worker leaves of absence a human-readable provider label while its identifier remains the stable reference.

Enables: Match descriptor in worker_leaves_of_absence.descriptor to the relevant worker, leave type, unit, and effective date for authorized leave administration.
Interpretation: Workday reports descriptor on each worker leave-of-absence records; missing and empty values can have different meanings. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Effective Date

Developer identifier: worker_leaves_of_absence.effectiveDateEffective Date. The effective date of the leave of absence. It anchors the worker leave-of-absence records on the provider’s reported timeline.

Enables: Match effective date in worker_leaves_of_absence.effectiveDate to the relevant worker, leave type, unit, and effective date for authorized leave administration.
Interpretation: Workday reports effective date as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Developer identifier: worker_leaves_of_absence.idID. Workday unique identifier for the leave of absence record. It provides the reference needed to connect the worker leave-of-absence records to the corresponding provider object.

Enables: Match repeated worker leave-of-absence records entries on ID in worker_leaves_of_absence.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its worker leave-of-absence records namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Multiple Child Indicator

Developer identifier: worker_leaves_of_absence.multipleChildIndicatorMultiple Child Indicator. Indicates whether the leave involves multiple children. It distinguishes the provider-defined multiple child indicator state or classification for the worker leaves of absence.

Enables: Match multiple child indicator in worker_leaves_of_absence.multipleChildIndicator to the relevant worker, leave type, unit, and effective date for authorized leave administration.
Interpretation: Workday reports multiple child indicator on each worker leave-of-absence records; missing and empty values can have different meanings. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Single Parent Indicator

Developer identifier: worker_leaves_of_absence.singleParentIndicatorSingle Parent Indicator. Indicates whether the worker is a single parent. It distinguishes the provider-defined single parent indicator state or classification for the worker leaves of absence.

Enables: Filter Worker Leaves Of Absence by the exact Workday-defined single parent indicator in worker_leaves_of_absence.singleParentIndicator and preserve unknown values as distinct categories.
Interpretation: Workday supplies single parent indicator from its own taxonomy on each worker leaves of absence; preserve unknown and newly introduced labels. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Stop Payment Date

Developer identifier: worker_leaves_of_absence.stopPaymentDateStop Payment Date. Date on which payment stops during the leave. It anchors the worker leave-of-absence records on the provider’s reported timeline.

Enables: Match stop payment date in worker_leaves_of_absence.stopPaymentDate to the relevant worker, leave type, unit, and effective date for authorized leave administration.
Interpretation: Workday reports stop payment date as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Worker ID

Developer identifier: worker_leaves_of_absence.worker_idWorker ID. Parent worker reference copied into each worker leave-of-absence records because the child operation does not return that relationship. It provides the reference needed to connect the worker leave-of-absence records to the corresponding provider object.

Enables: Connect each worker leave-of-absence records in worker leave-of-absence records to the referenced worker through worker_leaves_of_absence.worker_id; flag worker ID values that do not resolve in that provider namespace.
Interpretation: Parable copies worker ID from the parent traversal record into each worker leave-of-absence records; the child Workday operation does not return it. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.

Worker Pay Slips

Developer identifier: worker_pay_slipsWorker Pay Slips. Pay slips for a worker from the Payroll API.

Enables: Match pay-slip references to workers for payroll-record completeness checks.
Scope: Reads the records selected by Workday’s /ccx/api/payroll/v2/{tenantName}/workers/{worker_id}/paySlips operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized workforce and payroll reconciliation; the records are not invoices and do not support performance inference. A later complete read can treat a previously seen record that is absent as removed.

Descriptor

Developer identifier: worker_pay_slips.descriptorDescriptor. The provider-reported descriptor for each worker pay slip in Worker Pay Slips. It gives the worker pay slip a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from worker_pay_slips.descriptor for each worker pay slip; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker pay slip; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Developer identifier: worker_pay_slips.idID. The provider-reported ID for each worker pay slip in Worker Pay Slips. It provides the reference needed to connect the worker pay slip to the corresponding provider object.

Enables: Match repeated worker pay slip entries on ID in worker_pay_slips.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its worker pay slip namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Worker

Developer identifier: worker_pay_slips.workerWorker. The structured worker details attached to each worker pay slip in Worker Pay Slips. It preserves the nested context needed to interpret the parent worker pay slip.

Enables: Attribute worker in worker_pay_slips.worker to the parent worker pay slip; identify parent records where that nested worker object is absent.
Interpretation: Workday reports worker as a nested object on each worker pay slip; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Worker ID

Developer identifier: worker_pay_slips.worker_idWorker ID. Parent worker reference copied into each worker pay slip because the child operation does not return that relationship. It provides the reference needed to connect the worker pay slip to the corresponding provider object.

Enables: Connect each worker pay slip in Worker Pay Slips to the referenced worker through worker_pay_slips.worker_id; flag worker ID values that do not resolve in that provider namespace.
Interpretation: Parable copies worker ID from the parent traversal record into each worker pay slip; the child Workday operation does not return it. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Worker Time Blocks

Developer identifier: worker_time_blocksWorker Time Blocks. Extracts time block records for workers from the Workday Time Tracking REST API. Time blocks represent individual time entries logged by workers. Uses the explicit service path for Time Tracking. Paginated via offset/limit. Note: the /v1/ shortcut returns 404 for Time Tracking; the explicit versioned path is required. Confidence in exact query parameters is moderate — consult Time Tracking API docs for additional filter params (e.g., startDate, endDate).

Enables: Reconcile reported work dates and hours to the worker and Workday time-block reference.
Scope: Reads the records selected by Workday’s /ccx/api/timeTracking/v5/{tenantName}/workerTimeBlocks operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user’s domain and report permissions. Use is limited to authorized workforce time-entry reconciliation; recorded hours are not a Parable judgment about employee performance. A later complete read can treat a previously seen record that is absent as removed.

Date

Developer identifier: worker_time_blocks.dateDate. Date of the time block entry. It anchors the worker time block on the provider’s reported timeline.

Enables: Order Worker Time Blocks by date in worker_time_blocks.date and isolate records inside an exact provider reporting window.
Interpretation: Workday reports date as a calendar date on each worker time block; its grain is one day and no time of day should be inferred.

Descriptor

Developer identifier: worker_time_blocks.descriptorDescriptor. Human-readable descriptor for the time block. It gives the worker time block a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from worker_time_blocks.descriptor for each worker time block; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker time block; it is not a stable identity.

Hours

Developer identifier: worker_time_blocks.hoursHours. Number of hours recorded in this time block. It supplies the hours measure for the worker time block at the provider’s declared unit and grain.

Enables: Measure hours through worker_time_blocks.hours for each worker time block and compare only values with the same unit and record grain.
Interpretation: Workday reports hours as a measure on each worker time block; compare only records with the same unit and aggregation grain.

Developer identifier: worker_time_blocks.idID. Workday unique identifier for the time block. It provides the reference needed to connect the worker time block to the corresponding provider object.

Enables: Match repeated worker time block entries on ID in worker_time_blocks.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its worker time block namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.

Worker

Developer identifier: worker_time_blocks.workerWorker. Worker reference (ID/descriptor/href) who logged this time block. It preserves the nested context needed to interpret the parent worker time block.

Enables: Attribute worker in worker_time_blocks.worker to the parent worker time block; identify parent records where that nested worker object is absent.
Interpretation: Workday reports worker as a nested object on each worker time block; optional children may be absent from a valid response.

Descriptor

Developer identifier: worker_time_blocks.worker.descriptorDescriptor. Display name of the worker. It gives the worker a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from worker_time_blocks.worker.descriptor for each worker; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker; it is not a stable identity.

Href

Developer identifier: worker_time_blocks.worker.hrefHref. API URL to the worker resource. It locates the provider resource or path associated with the worker.

Enables: Associate each worker with the resource identified by href in worker_time_blocks.worker.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: worker_time_blocks.worker.idID. Workday ID of the worker. It provides the reference needed to connect the worker time block to the corresponding provider object.

Enables: Connect each worker in Worker Time Blocks to the referenced worker through worker_time_blocks.worker.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its worker namespace; it is not a universal identity outside Workday.

Workers

Developer identifier: workersWorkers. Employee and contingent worker records from the Staffing API.

Enables: Reconcile employee and contingent-worker identities with employment status, organization, manager, job, location, and authorized compensation context.
Scope: Reads the records selected by Workday’s /ccx/api/staffing/v7/{tenantName}/workers operation as a snapshot stream using full synchronization. Visibility follows the Workday integration system user’s domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

Additional Emails

Developer identifier: workers.additionalEmailsAdditional Emails. Additional email addresses associated with the worker. It preserves the nested context needed to interpret the parent worker.

Enables: Reconcile each returned email record in workers.additionalEmails with the parent worker’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Workday returns additional emails as an array of email record entries on each worker; missing, empty, and permission-redacted arrays are not equivalent.

Email Address

Developer identifier: workers.additionalEmails.emailAddressEmail Address. The email address. It supplies the provider-reported address or location facet for the email record, not a residency determination.

Enables: Match repeated email record entries on email address in workers.EmailRecord.emailAddress; it is not a declared deduplication key, so entries stay keyed by their position in the array.
Interpretation: Workday reports email address as an address on each email record; aliases, casing, and unverified addresses can prevent a one-to-one person match.

Is Primary

Developer identifier: workers.additionalEmails.isPrimaryIs Primary. Whether this is the primary email for the usage type. It distinguishes the provider-defined is primary state or classification for the email record.

Enables: Filter Workers by whether this is the primary email for the usage type in workers.EmailRecord.isPrimary; count true, false, and missing results separately.
Interpretation: Workday reports this is the primary email for the usage type as a boolean on each email record; a missing field is unknown, not false.

Usage Type

Developer identifier: workers.additionalEmails.usageTypeUsage Type. Usage type (e.g., Work, Home). It distinguishes the provider-defined usage type state or classification for the email record.

Enables: Segment email record entries in Workers by usage type in workers.EmailRecord.usageType; compare counts only within the same Workday taxonomy.
Interpretation: Workday reports usage type as a label from its own taxonomy on each email record; preserve unknown labels rather than mapping them by assumption.

Additional Phones

Developer identifier: workers.additionalPhonesAdditional Phones. Additional phone numbers associated with the worker. It preserves the nested context needed to interpret the parent worker.

Enables: Reconcile each returned phone record in workers.additionalPhones with the parent worker’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Workday returns additional phones as an array of phone record entries on each worker; missing, empty, and permission-redacted arrays are not equivalent.

Device Type

Developer identifier: workers.additionalPhones.deviceTypeDevice Type. Device type (e.g., Landline, Mobile). It distinguishes the provider-defined device type state or classification for the phone record.

Enables: Segment phone record entries in Workers by device type in workers.PhoneRecord.deviceType; compare counts only within the same Workday taxonomy.
Interpretation: Workday reports device type as a label from its own taxonomy on each phone record; preserve unknown labels rather than mapping them by assumption.

Is Primary

Developer identifier: workers.additionalPhones.isPrimaryIs Primary. Whether this is the primary phone for the usage type. It distinguishes the provider-defined is primary state or classification for the phone record.

Enables: Filter Workers by whether this is the primary phone for the usage type in workers.PhoneRecord.isPrimary; count true, false, and missing results separately.
Interpretation: Workday reports this is the primary phone for the usage type as a boolean on each phone record; a missing field is unknown, not false.

Phone Number

Developer identifier: workers.additionalPhones.phoneNumberPhone Number. The phone number. It supplies the phone number profile facet used to reconcile or attribute the phone record.

Enables: Match repeated phone record entries on phone number in workers.PhoneRecord.phoneNumber; it is not a declared deduplication key, so entries stay keyed by their position in the array.
Interpretation: Workday reports phone number on each phone record; missing and empty values can have different meanings.

Usage Type

Developer identifier: workers.additionalPhones.usageTypeUsage Type. Usage type (e.g., Work, Home, Mobile). It distinguishes the provider-defined usage type state or classification for the phone record.

Enables: Segment phone record entries in Workers by usage type in workers.PhoneRecord.usageType; compare counts only within the same Workday taxonomy.
Interpretation: Workday reports usage type as a label from its own taxonomy on each phone record; preserve unknown labels rather than mapping them by assumption.

Addresses

Developer identifier: workers.addressesAddresses. Addresses associated with the worker. It preserves the nested context needed to interpret the parent worker.

Enables: Reconcile each returned address record in workers.addresses with the parent worker’s provider profile; preserve distinct aliases, contact points, and organization attributes.
Interpretation: Workday returns addresses as an array of address record entries on each worker; missing, empty, and permission-redacted arrays are not equivalent.

Address Line1

Developer identifier: workers.addresses.addressLine1Address Line1. First line of the address. It supplies the provider-reported address or location facet for the address record, not a residency determination.

Enables: Group Workers by the exact address line1 in workers.AddressRecord.addressLine1 while keeping that address or location separate from geolocation and residency claims.
Interpretation: Workday reports address line1 as an address or location facet on each address record; it does not establish verified geolocation or data residency.

Address Line2

Developer identifier: workers.addresses.addressLine2Address Line2. Second line of the address. It supplies the provider-reported address or location facet for the address record, not a residency determination.

Enables: Group Workers by the exact address line2 in workers.AddressRecord.addressLine2 while keeping that address or location separate from geolocation and residency claims.
Interpretation: Workday reports address line2 as an address or location facet on each address record; it does not establish verified geolocation or data residency.

City

Developer identifier: workers.addresses.cityCity. City or municipality. It supplies the provider-reported address or location facet for the address record, not a residency determination.

Enables: Group Workers by city in workers.AddressRecord.city without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Workday reports city as a user, device, request, or resource location attribute on each address record; it does not establish where data is stored or processed.

Country

Developer identifier: workers.addresses.countryCountry. Country code (ISO 3166-1 alpha-2). It supplies the provider-reported address or location facet for the address record, not a residency determination.

Enables: Group Workers by country in workers.AddressRecord.country without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Workday reports country as a user, device, request, or resource location attribute on each address record; it does not establish where data is stored or processed.

Is Primary

Developer identifier: workers.addresses.isPrimaryIs Primary. Whether this is the primary address for the usage type. It distinguishes the provider-defined is primary state or classification for the address record.

Enables: Filter Workers by whether this is the primary address for the usage type in workers.AddressRecord.isPrimary; count true, false, and missing results separately.
Interpretation: Workday reports this is the primary address for the usage type as a boolean on each address record; a missing field is unknown, not false.

Postal Code

Developer identifier: workers.addresses.postalCodePostal Code. Postal or ZIP code. It supplies the provider-reported address or location facet for the address record, not a residency determination.

Enables: Group Workers by the exact postal code in workers.AddressRecord.postalCode while keeping that address or location separate from geolocation and residency claims.
Interpretation: Workday reports postal code as an address or location facet on each address record; it does not establish verified geolocation or data residency.

State Province

Developer identifier: workers.addresses.stateProvinceState Province. State, province, or region. It supplies the provider-reported address or location facet for the address record, not a residency determination.

Enables: Group Workers by state province in workers.AddressRecord.stateProvince without treating that user, device, or request attribute as a data-residency signal.
Interpretation: Workday reports state province as a user, device, request, or resource location attribute on each address record; it does not establish where data is stored or processed.

Usage Type

Developer identifier: workers.addresses.usageTypeUsage Type. Usage type (e.g., Work, Home). It distinguishes the provider-defined usage type state or classification for the address record.

Enables: Segment address record entries in Workers by usage type in workers.AddressRecord.usageType; compare counts only within the same Workday taxonomy.
Interpretation: Workday reports usage type as a label from its own taxonomy on each address record; preserve unknown labels rather than mapping them by assumption.

Business Site

Developer identifier: workers.businessSiteBusiness Site. The business site or office location. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute business site in workers.businessSite to the parent worker; identify parent records where that nested business site object is absent.
Interpretation: Workday reports business site as a nested object on each worker; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.

Descriptor

Developer identifier: workers.businessSite.descriptorDescriptor. Display name of the business site. It gives the business site ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.BusinessSiteRef.descriptor for each business site ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each business site ref; it is not a stable identity.

Href

Developer identifier: workers.businessSite.hrefHref. API URL to the business site resource. It locates the provider resource or path associated with the business site ref.

Enables: Associate each business site ref with the resource identified by href in workers.BusinessSiteRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each business site ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.businessSite.idID. Unique identifier for the business site. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each business site ref in Workers to the referenced business site ref through workers.BusinessSiteRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its business site ref namespace; it is not a universal identity outside Workday.

Business Title

Developer identifier: workers.businessTitleBusiness Title. The worker’s current business title. It supplies the business title profile facet used to reconcile or attribute the worker.

Enables: Label each worker with business title from workers.businessTitle; distinguish records that share that display name but have different Workday identifiers.
Interpretation: Workday reports business title as display text for each worker; names are mutable and are not stable identities.

Company

Developer identifier: workers.companyCompany. The company entity the worker belongs to. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute company in workers.company to the parent worker; identify parent records where that nested company object is absent.
Interpretation: Workday reports company as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.company.descriptorDescriptor. Display name of the company. It gives the company ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.CompanyRef.descriptor for each company ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each company ref; it is not a stable identity.

Href

Developer identifier: workers.company.hrefHref. API URL to the company resource. It locates the provider resource or path associated with the company ref.

Enables: Associate each company ref with the resource identified by href in workers.CompanyRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each company ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.company.idID. Unique identifier for the company. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each company ref in Workers to the referenced company ref through workers.CompanyRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its company ref namespace; it is not a universal identity outside Workday.

Compensation Summary

Developer identifier: workers.compensationSummaryCompensation Summary. Summary of the worker’s compensation details. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute compensation summary in workers.compensationSummary to the parent worker; identify parent records where that nested compensation summary object is absent.
Interpretation: Workday reports compensation summary as a nested object on each worker; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Compensation Grade

Developer identifier: workers.compensationSummary.compensationGradeCompensation Grade. The compensation grade assigned to the worker. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute compensation grade in workers.CompensationSummary.compensationGrade to the parent worker; identify parent records where that nested compensation grade object is absent.
Interpretation: Workday reports compensation grade as a nested object on each compensation summary; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Descriptor

Developer identifier: workers.compensationSummary.compensationGrade.descriptorDescriptor. Display name of the compensation grade. It gives the compensation grade ref a human-readable provider label while its identifier remains the stable reference.

Enables: Reconcile descriptor in workers.CompensationGradeRef.descriptor by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports descriptor on each compensation grade ref; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Developer identifier: workers.compensationSummary.compensationGrade.idID. Unique identifier for the compensation grade. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each compensation grade ref in Workers to the referenced compensation grade ref through workers.CompensationGradeRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its compensation grade ref namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.

Compensation Step

Developer identifier: workers.compensationSummary.compensationStepCompensation Step. The compensation step within the grade, if applicable. It distinguishes the provider-defined compensation step state or classification for the compensation summary.

Enables: Reconcile compensation step in workers.CompensationSummary.compensationStep by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports compensation step on each compensation summary; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Currency

Developer identifier: workers.compensationSummary.currencyCurrency. ISO 4217 currency code for compensation values. It distinguishes the provider-defined currency state or classification for the compensation summary.

Enables: Reconcile currency in workers.CompensationSummary.currency by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports currency on each compensation summary; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Total Base Pay Amount

Developer identifier: workers.compensationSummary.totalBasePayAmountTotal Base Pay Amount. Total base pay amount. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute total base pay amount in workers.CompensationSummary.totalBasePayAmount to the parent worker; identify parent records where that nested total base pay amount object is absent.
Interpretation: Workday reports total base pay amount as a nested object on each compensation summary; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Amount

Developer identifier: workers.compensationSummary.totalBasePayAmount.amountAmount. Numeric monetary value. It supplies the amount measure for the money amount at the provider’s declared unit and grain.

Enables: Measure amount through workers.MoneyAmount.amount for each money amount and compare only values with the same unit and record grain.
Interpretation: Workday reports amount as a measure on each money amount; compare only records with the same unit and aggregation grain.

Currency

Developer identifier: workers.compensationSummary.totalBasePayAmount.currencyCurrency. ISO 4217 currency code. It distinguishes the provider-defined currency state or classification for the money amount.

Enables: Filter Workers by the exact Workday-defined currency in workers.MoneyAmount.currency and preserve unknown values as distinct categories.
Interpretation: Workday supplies currency from its own taxonomy on each money amount; preserve unknown and newly introduced labels.

Total Base Pay Annualized Amount

Developer identifier: workers.compensationSummary.totalBasePayAnnualizedAmountTotal Base Pay Annualized Amount. Annualized total base pay amount. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute total base pay annualized amount in workers.CompensationSummary.totalBasePayAnnualizedAmount to the parent worker; identify parent records where that nested total base pay annualized amount object is absent.
Interpretation: Workday reports total base pay annualized amount as a nested object on each compensation summary; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Total Base Pay Frequency

Developer identifier: workers.compensationSummary.totalBasePayFrequencyTotal Base Pay Frequency. Frequency of base pay (e.g., Annual, Monthly, Hourly). It supplies the total base pay frequency measure for the compensation summary at the provider’s declared unit and grain.

Enables: Reconcile total base pay frequency in workers.CompensationSummary.totalBasePayFrequency by pairing it with the same worker or position, currency, pay basis, and effective period.
Interpretation: Workday reports total base pay frequency as a count at the parent record’s grain on each compensation summary; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.

Contingent Worker ID

Developer identifier: workers.contingentWorkerIDContingent Worker ID. Contingent worker ID, if applicable. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each worker in Workers to the referenced contingent worker through workers.contingentWorkerID; flag contingent worker ID values that do not resolve in that provider namespace.
Interpretation: Workday reports contingent worker ID as an identifier in its contingent worker namespace; it is not a universal identity outside Workday.

Cost Center

Developer identifier: workers.costCenterCost Center. The cost center the worker is assigned to. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute cost center in workers.costCenter to the parent worker; identify parent records where that nested cost center object is absent.
Interpretation: Workday reports cost center as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.costCenter.descriptorDescriptor. Display name of the cost center. It gives the cost center ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.CostCenterRef.descriptor for each cost center ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each cost center ref; it is not a stable identity.

Href

Developer identifier: workers.costCenter.hrefHref. API URL to the cost center resource. It locates the provider resource or path associated with the cost center ref.

Enables: Associate each cost center ref with the resource identified by href in workers.CostCenterRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each cost center ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.costCenter.idID. Unique identifier for the cost center. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each cost center ref in Workers to the referenced cost center ref through workers.CostCenterRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its cost center ref namespace; it is not a universal identity outside Workday.

Custom Fields

Developer identifier: workers.customFieldsCustom Fields. Custom fields configured in the Workday tenant for workers. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute custom fields in workers.customFields to the parent worker; identify parent records where that nested custom fields object is absent.
Interpretation: Workday reports custom fields as a nested object on each worker; optional children may be absent from a valid response.

Default Weekly Hours

Developer identifier: workers.defaultWeeklyHoursDefault Weekly Hours. Default weekly hours for the position. It supplies the default weekly hours measure for the worker at the provider’s declared unit and grain.

Enables: Measure default weekly hours through workers.defaultWeeklyHours for each worker and compare only values with the same unit and record grain.
Interpretation: Workday reports default weekly hours as a measure on each worker; compare only records with the same unit and aggregation grain.

Department

Developer identifier: workers.departmentDepartment. The department the worker belongs to. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute department in workers.department to the parent worker; identify parent records where that nested department object is absent.
Interpretation: Workday reports department as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.department.descriptorDescriptor. Display name of the department. It gives the department ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.DepartmentRef.descriptor for each department ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each department ref; it is not a stable identity.

Href

Developer identifier: workers.department.hrefHref. API URL to the department resource. It locates the provider resource or path associated with the department ref.

Enables: Associate each department ref with the resource identified by href in workers.DepartmentRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each department ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.department.idID. Unique identifier for the department. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each department ref in Workers to the referenced department ref through workers.DepartmentRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its department ref namespace; it is not a universal identity outside Workday.

Descriptor

Developer identifier: workers.descriptorDescriptor. Display name of the worker. It gives the worker a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.descriptor for each worker; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker; it is not a stable identity. A connector directive maps this field to a person’s display name.

Developer identifier: workers.emailEmail. Primary work email address of the worker. It supplies the provider-reported address or location facet for the worker, not a residency determination.

Enables: Attribute each worker to a person or account by the exact email in workers.email; identify addresses that do not match the Workday directory.
Interpretation: Workday reports email as an address on each worker; aliases, casing, and unverified addresses can prevent a one-to-one person match. A connector directive maps this field to a person’s email identity.

Employee ID

Developer identifier: workers.employeeIDEmployee ID. Employee ID assigned by the organization. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each worker in Workers to the referenced employee through workers.employeeID; flag employee ID values that do not resolve in that provider namespace.
Interpretation: Workday reports employee ID as an identifier in its employee namespace; it is not a universal identity outside Workday.

End Employment Date

Developer identifier: workers.endEmploymentDateEnd Employment Date. The date employment ended, if applicable. It anchors the worker on the provider’s reported timeline.

Enables: Filter Workers by end employment date in workers.endEmploymentDate; pair that boundary with the corresponding start before measuring elapsed time.
Interpretation: Workday reports end employment date as a calendar date on each worker; its grain is one day and no time of day should be inferred.

Hire Date

Developer identifier: workers.hireDateHire Date. The date the worker was originally hired. It anchors the worker on the provider’s reported timeline.

Enables: Order Workers by hire date in workers.hireDate and isolate records inside an exact provider reporting window.
Interpretation: Workday reports hire date as a calendar date on each worker; its grain is one day and no time of day should be inferred.

Href

Developer identifier: workers.hrefHref. API URL to the worker resource. It locates the provider resource or path associated with the worker.

Enables: Associate each worker with the resource identified by href in workers.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.idID. Unique Workday ID for the worker. Primary key for cross-system identity resolution. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Match repeated worker entries on ID in workers.id; collapse only entries that share this declared transform key.
Interpretation: Workday reports ID as an identifier in its worker namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. A connector directive maps this field to account identity.

Is Active

Developer identifier: workers.isActiveIs Active. Whether the worker is currently active. It distinguishes the provider-defined is active state or classification for the worker.

Enables: Filter Workers by whether the worker is currently active in workers.isActive; count true, false, and missing results separately.
Interpretation: Workday reports the worker is currently active as a boolean on each worker; a missing field is unknown, not false.

Job Category

Developer identifier: workers.jobCategoryJob Category. The job category classification. It distinguishes the provider-defined job category state or classification for the worker.

Enables: Segment worker entries in Workers by job category in workers.jobCategory; compare counts only within the same Workday taxonomy.
Interpretation: Workday reports job category as a label from its own taxonomy on each worker; preserve unknown labels rather than mapping them by assumption.

Job Family

Developer identifier: workers.jobFamilyJob Family. The job family grouping for the worker’s role. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute job family in workers.jobFamily to the parent worker; identify parent records where that nested job family object is absent.
Interpretation: Workday reports job family as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.jobFamily.descriptorDescriptor. Display name of the job family. It gives the job family ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.JobFamilyRef.descriptor for each job family ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each job family ref; it is not a stable identity.

Href

Developer identifier: workers.jobFamily.hrefHref. API URL to the job family resource. It locates the provider resource or path associated with the job family ref.

Enables: Associate each job family ref with the resource identified by href in workers.JobFamilyRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each job family ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.jobFamily.idID. Unique identifier for the job family. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each job family ref in Workers to the referenced job family ref through workers.JobFamilyRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its job family ref namespace; it is not a universal identity outside Workday.

Job Profile

Developer identifier: workers.jobProfileJob Profile. The job profile associated with the worker’s current position. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute job profile in workers.jobProfile to the parent worker; identify parent records where that nested job profile object is absent.
Interpretation: Workday reports job profile as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.jobProfile.descriptorDescriptor. Display name of the job profile. It gives the job profile ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.JobProfileRef.descriptor for each job profile ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each job profile ref; it is not a stable identity.

Href

Developer identifier: workers.jobProfile.hrefHref. API URL to the job profile resource. It locates the provider resource or path associated with the job profile ref.

Enables: Associate each job profile ref with the resource identified by href in workers.JobProfileRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each job profile ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.jobProfile.idID. Unique identifier for the job profile. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each job profile ref in Workers to the referenced job profile ref through workers.JobProfileRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its job profile ref namespace; it is not a universal identity outside Workday.

Last Functionality Update

Developer identifier: workers.lastFunctionalityUpdateLast Functionality Update. Timestamp of the last functional update to this worker record, useful for incremental sync. It anchors the worker on the provider’s reported timeline.

Enables: Order Workers by last functionality update in workers.lastFunctionalityUpdate and isolate records inside an exact provider reporting window.
Interpretation: Workday reports last functionality update as a timestamp on each worker; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.

Legal Name

Developer identifier: workers.legalNameLegal Name. Legal name of the worker. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute legal name in workers.legalName to the parent worker; identify parent records where that nested legal name object is absent.
Interpretation: Workday reports legal name as a nested object on each worker; optional children may be absent from a valid response.

First Name

Developer identifier: workers.legalName.firstNameFirst Name. First/given name. It gives the person name a human-readable provider label while its identifier remains the stable reference.

Enables: Label each person name with first name from workers.PersonName.firstName; distinguish records that share that display name but have different Workday identifiers.
Interpretation: Workday reports first name as display text for each person name; names are mutable and are not stable identities.

Full Name

Developer identifier: workers.legalName.fullNameFull Name. Full formatted name. It gives the person name a human-readable provider label while its identifier remains the stable reference.

Enables: Label each person name with full name from workers.PersonName.fullName; distinguish records that share that display name but have different Workday identifiers.
Interpretation: Workday reports full name as display text for each person name; names are mutable and are not stable identities.

Last Name

Developer identifier: workers.legalName.lastNameLast Name. Last/family name. It gives the person name a human-readable provider label while its identifier remains the stable reference.

Enables: Label each person name with last name from workers.PersonName.lastName; distinguish records that share that display name but have different Workday identifiers.
Interpretation: Workday reports last name as display text for each person name; names are mutable and are not stable identities.

Middle Name

Developer identifier: workers.legalName.middleNameMiddle Name. Middle name, if any. It gives the person name a human-readable provider label while its identifier remains the stable reference.

Enables: Label each person name with middle name from workers.PersonName.middleName; distinguish records that share that display name but have different Workday identifiers.
Interpretation: Workday reports middle name as display text for each person name; names are mutable and are not stable identities.

Prefix

Developer identifier: workers.legalName.prefixPrefix. Name prefix/title (e.g., Mr., Dr.). It supplies the prefix profile facet used to reconcile or attribute the person name.

Enables: Reconcile the worker’s prefix in workers.PersonName.prefix with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Workday reports prefix as a mutable profile or directory attribute on each person name; it may be absent, shared, or non-unique.

Suffix

Developer identifier: workers.legalName.suffixSuffix. Name suffix (e.g., Jr., III). It supplies the suffix profile facet used to reconcile or attribute the person name.

Enables: Reconcile the worker’s suffix in workers.PersonName.suffix with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Workday reports suffix as a mutable profile or directory attribute on each person name; it may be absent, shared, or non-unique.

Location

Developer identifier: workers.locationLocation. Primary work location of the worker. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute location in workers.location to the parent worker; identify parent records where that nested location object is absent.
Interpretation: Workday reports location as a nested object on each worker; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.

Descriptor

Developer identifier: workers.location.descriptorDescriptor. Display name of the location. It supplies the provider-reported address or location facet for the location ref, not a residency determination.

Enables: Group Workers by the exact descriptor in workers.LocationRef.descriptor while keeping that address or location separate from geolocation and residency claims.
Interpretation: Workday reports descriptor as an address or location facet on each location ref; it does not establish verified geolocation or data residency.

Href

Developer identifier: workers.location.hrefHref. API URL to the location resource. It supplies the provider-reported address or location facet for the location ref, not a residency determination.

Enables: Associate each location ref with the resource identified by href in workers.LocationRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each location ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.location.idID. Unique identifier for the location. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each location ref in Workers to the referenced location ref through workers.LocationRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its location ref namespace; it is not a universal identity outside Workday.

Management Level

Developer identifier: workers.managementLevelManagement Level. Management level of the worker (e.g., Individual Contributor, Manager, Director). It preserves the nested context needed to interpret the parent worker.

Enables: Attribute management level in workers.managementLevel to the parent worker; identify parent records where that nested management level object is absent.
Interpretation: Workday reports management level as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.managementLevel.descriptorDescriptor. Display name of the management level (e.g., Individual Contributor, Manager, Director). It gives the management level ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.ManagementLevelRef.descriptor for each management level ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each management level ref; it is not a stable identity.

Developer identifier: workers.managementLevel.idID. Unique identifier for the management level. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each management level ref in Workers to the referenced management level ref through workers.ManagementLevelRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its management level ref namespace; it is not a universal identity outside Workday.

Original Hire Date

Developer identifier: workers.originalHireDateOriginal Hire Date. The original hire date, which may differ from hire date for rehires. It anchors the worker on the provider’s reported timeline.

Enables: Order Workers by original hire date in workers.originalHireDate and isolate records inside an exact provider reporting window.
Interpretation: Workday reports original hire date as a calendar date on each worker; its grain is one day and no time of day should be inferred.

Pay Type

Developer identifier: workers.payTypePay Type. Pay type such as Salaried or Hourly. It distinguishes the provider-defined pay type state or classification for the worker.

Enables: Segment worker entries in Workers by pay type in workers.payType; compare counts only within the same Workday taxonomy.
Interpretation: Workday reports pay type as a label from its own taxonomy on each worker; preserve unknown labels rather than mapping them by assumption.

Photo

Developer identifier: workers.photoPhoto. URL to the worker’s photo. It locates the provider resource or path associated with the worker.

Enables: Associate each worker with the resource identified by photo in workers.photo; verify the link resolves to the expected Workday object.
Interpretation: Workday reports photo as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change. A connector directive maps this field to the person’s identity photo.

Position

Developer identifier: workers.positionPosition. The position the worker currently holds. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute position in workers.position to the parent worker; identify parent records where that nested position object is absent.
Interpretation: Workday reports position as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.position.descriptorDescriptor. Display name of the position. It gives the position ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.PositionRef.descriptor for each position ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each position ref; it is not a stable identity.

Href

Developer identifier: workers.position.hrefHref. API URL to the position resource. It locates the provider resource or path associated with the position ref.

Enables: Associate each position ref with the resource identified by href in workers.PositionRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each position ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.position.idID. Unique identifier for the position. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each position ref in Workers to the referenced position ref through workers.PositionRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its position ref namespace; it is not a universal identity outside Workday.

Preferred Name

Developer identifier: workers.preferredNamePreferred Name. Preferred name of the worker, if different from legal name. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute preferred name in workers.preferredName to the parent worker; identify parent records where that nested preferred name object is absent.
Interpretation: Workday reports preferred name as a nested object on each worker; optional children may be absent from a valid response.

Primary Supervisor

Developer identifier: workers.primarySupervisorPrimary Supervisor. The worker’s primary supervisor/manager. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute primary supervisor in workers.primarySupervisor to the parent worker; identify parent records where that nested primary supervisor object is absent.
Interpretation: Workday reports primary supervisor as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.primarySupervisor.descriptorDescriptor. Display name of the referenced worker. It gives the worker ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.WorkerRef.descriptor for each worker ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker ref; it is not a stable identity.

Href

Developer identifier: workers.primarySupervisor.hrefHref. API URL to the referenced worker resource. It locates the provider resource or path associated with the worker ref.

Enables: Associate each worker ref with the resource identified by href in workers.WorkerRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each worker ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.primarySupervisor.idID. Unique Workday ID of the referenced worker. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each worker ref in Workers to the referenced worker ref through workers.WorkerRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its worker ref namespace; it is not a universal identity outside Workday.

Primary Work Phone

Developer identifier: workers.primaryWorkPhonePrimary Work Phone. Primary work phone number. It supplies the primary work phone profile facet used to reconcile or attribute the worker.

Enables: Reconcile the worker’s primary work phone in workers.primaryWorkPhone with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
Interpretation: Workday reports primary work phone as a mutable profile or directory attribute on each worker; it may be absent, shared, or non-unique.

Scheduled Weekly Hours

Developer identifier: workers.scheduledWeeklyHoursScheduled Weekly Hours. Scheduled weekly hours for the worker. It supplies the scheduled weekly hours measure for the worker at the provider’s declared unit and grain.

Enables: Measure scheduled weekly hours through workers.scheduledWeeklyHours for each worker and compare only values with the same unit and record grain.
Interpretation: Workday reports scheduled weekly hours as a measure on each worker; compare only records with the same unit and aggregation grain.

Supervisory Organization

Developer identifier: workers.supervisoryOrganizationSupervisory Organization. The supervisory organization the worker belongs to. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute supervisory organization in workers.supervisoryOrganization to the parent worker; identify parent records where that nested supervisory organization object is absent.
Interpretation: Workday reports supervisory organization as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.supervisoryOrganization.descriptorDescriptor. Display name of the supervisory organization. It gives the supervisory organization ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.SupervisoryOrganizationRef.descriptor for each supervisory organization ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each supervisory organization ref; it is not a stable identity.

Href

Developer identifier: workers.supervisoryOrganization.hrefHref. API URL to the supervisory organization resource. It locates the provider resource or path associated with the supervisory organization ref.

Enables: Associate each supervisory organization ref with the resource identified by href in workers.SupervisoryOrganizationRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each supervisory organization ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.supervisoryOrganization.idID. Unique identifier for the supervisory organization. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each supervisory organization ref in Workers to the referenced supervisory organization ref through workers.SupervisoryOrganizationRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its supervisory organization ref namespace; it is not a universal identity outside Workday.

Termination Date

Developer identifier: workers.terminationDateTermination Date. The date the worker was terminated, if applicable. It anchors the worker on the provider’s reported timeline.

Enables: Order Workers by termination date in workers.terminationDate and isolate records inside an exact provider reporting window.
Interpretation: Workday reports termination date as a calendar date on each worker; its grain is one day and no time of day should be inferred.

Time Type

Developer identifier: workers.timeTypeTime Type. Time type such as Full_time or Part_time. It distinguishes the provider-defined time type state or classification for the worker.

Enables: Segment worker entries in Workers by time type in workers.timeType; compare counts only within the same Workday taxonomy.
Interpretation: Workday reports time type as a label from its own taxonomy on each worker; preserve unknown labels rather than mapping them by assumption.

Worker Type

Developer identifier: workers.workerTypeWorker Type. Whether the worker is an employee or contingent worker. It preserves the nested context needed to interpret the parent worker.

Enables: Attribute worker type in workers.workerType to the parent worker; identify parent records where that nested worker type object is absent.
Interpretation: Workday reports worker type as a nested object on each worker; optional children may be absent from a valid response.

Descriptor

Developer identifier: workers.workerType.descriptorDescriptor. Display label for the worker type (e.g., Employee, Contingent Worker). It gives the worker type ref a human-readable provider label while its identifier remains the stable reference.

Enables: Display the descriptor from workers.WorkerTypeRef.descriptor for each worker type ref; resolve duplicate or changed labels through the provider ID rather than the text.
Interpretation: Workday supplies descriptor as mutable display text on each worker type ref; it is not a stable identity.

Href

Developer identifier: workers.workerType.hrefHref. API URL to the worker type resource. It locates the provider resource or path associated with the worker type ref.

Enables: Associate each worker type ref with the resource identified by href in workers.WorkerTypeRef.href; verify the link resolves to the expected Workday object.
Interpretation: Workday reports href as a resource locator for each worker type ref; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: workers.workerType.idID. Unique identifier for the worker type. It provides the reference needed to connect the worker to the corresponding provider object.

Enables: Connect each worker type ref in Workers to the referenced worker type ref through workers.WorkerTypeRef.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Workday reports ID as an identifier in its worker type ref namespace; it is not a universal identity outside Workday.

Error	Meaning	Solution
`invalid_client`	Wrong client credentials	Verify Client ID and Secret; confirm Client Credentials grant type
`invalid_grant`	Client misconfigured	Confirm ISU is linked on the API client; confirm OAuth 2.0 is enabled on the tenant
`403 Forbidden`	Missing functional area or domain permission	Enable all functional areas; grant GET on domains; activate security changes
`403 Forbidden` on `/activityLogging`	Missing Privacy access	Enable User Activity Logging, add the System functional area to the API client, grant the ISU security group Get access to System Auditing, and activate security changes
`404 Not Found`	Wrong services host or tenant	Verify tenant name and Base URL services host
Fields missing or null in API JSON	Domain security gap	Grant GET on the domain that owns that field (not an API bug)

Common Issues

”User not authorized for this operation”

The Integration System User’s security group lacks domain GET permission for the endpoint you called. Revisit Domain Security Policy Permissions, add the group to the matching domain, and run Activate Pending Security Policy Changes.

Token exchange succeeds but payroll or absence calls fail

The API client is missing a Scope (Functional Area). Edit the client and enable Payroll, Absence Management, and Time Tracking in addition to Staffing and Organizations and Roles.

Connection test passes but a specific endpoint fails in sync

Parable’s connection test probes Staffing (/workers) only. A failure on payroll, absence, time, or Privacy data means the matching Workday functional area or domain permission is still missing. Test /activityLogging separately with a recent bounded UTC range before enabling the User Activity Logging stream.

User Activity Logging stops at 10,000 entries

Workday limits one retrieval window to 10,000 entries. Parable reads one-day windows and cannot yet split a busy day after that cap, so later entries in that day can be omitted. Narrowing a manual probe with repeated systemAccount or taskId query parameters does not change the permissions granted to the credential.

Confusion about refresh tokens

Some Workday guides describe Manage Refresh Tokens for Integrations. Parable uses the client credentials grant with client ID and secret only; no refresh token setup is required.Workday REST API — Official API documentation (Workday sign-in required)Workday User Activity Logging - Official retrieval and retention guidanceWorkday Privacy v1 OpenAPI - Official operation and response schemaWorkday HRIS RaaS — Custom report Provider Plugin (separate authentication)

​Staffing & Organizations

​Payroll, Absence & Time

​Privacy and auditing

​How It Works

​Token Request

​Using the Access Token

​Data streams

​Workday

​What You’ll Need

​Step 1: Create Integration System User

​Step 2: Create Integration System Security Group

​Step 3: Grant Domain Security Permissions

​Step 4: Activate Security Changes

​Step 5: Register API Client

​Step 6: Confirm ISU Is Linked

​Step 7: Tenant URLs

​Step 8: Enter Values in Parable

​Common Issues

​”User not authorized for this operation”

​Token exchange succeeds but payroll or absence calls fail

​Connection test passes but a specific endpoint fails in sync

​User Activity Logging stops at 10,000 entries

​Confusion about refresh tokens

Staffing & Organizations

Payroll, Absence & Time

Privacy and auditing

How It Works

Token Request

Using the Access Token

Data streams

Workday

What You’ll Need

Step 1: Create Integration System User

Step 2: Create Integration System Security Group

Step 3: Grant Domain Security Permissions

Step 4: Activate Security Changes

Step 5: Register API Client

Step 6: Confirm ISU Is Linked

Step 7: Tenant URLs

Step 8: Enter Values in Parable

Common Issues

”User not authorized for this operation”

Token exchange succeeds but payroll or absence calls fail

Connection test passes but a specific endpoint fails in sync

User Activity Logging stops at 10,000 entries

Confusion about refresh tokens