Overview

This integration pulls employee profile data from Workday via RAAS (Report-as-a-Service) and uses it to power knowledge-based verification during helpdesk interactions.

When an employee contacts the helpdesk, imper.ai can ask questions whose correct answers are drawn directly from Workday — such as their manager's name, department, job title, or start date. Because these answers come from an authoritative HR source rather than self-reported data, they are significantly harder for an attacker to guess or fabricate.

---

Prerequisites

To integrate Workday with imper.ai, you must:

• Have Workday admin permissions.
• Be able to create Integration System Users (ISUs), Security Groups, and custom reports in your Workday tenant.

---

Setup

The setup process consists of 5 steps, all completed in Workday before connecting to imper.ai:

1. Create an Integration System User (ISU)
2. Create a Security Group
3. Grant permissions to the Security Group
4. Activate Security Policy Changes
5. Create a Workday Report (RAAS)

---

Step 1: Create an Integration System User (ISU)

1. In the Workday search bar, type "Create Integration System User" and select the task.

2. In the form, enter the following:

   • User Name: imperai_ISU (or any name of your choice)
   • Password: choose a strong password

3. Click OK.

4. Save the username and password — you will need them when connecting Workday to imper.ai.

5. Search for "Maintain Password Rules" and open the task.

   • Add your ISU to the "System Users Exempt from Password Expiration" field to prevent the integration from breaking due to password expiration.

---

Step 2: Create a Security Group

1. In the search bar, type "Create Security Group" and select the task.

2. From the Type of Tenanted Security Group dropdown, select: Integration System Security Group (Unconstrained).

3. Enter a name for the group (e.g., imperai_SG) and click OK.

4. On the next screen (Edit Integration System Security Group), add your ISU (imperai_ISU) to the group and click OK.

---

Step 3: Grant Permissions to the Security Group

1. In the search bar, type "Maintain Permissions for Security Group" and select the task.

2. In the dialog, set:

   • Operation: Maintain
   • Source Security Group: imperai_SG (the group created in Step 2)

3. Scroll to the Domain Security Policy Permissions section.

4. For each domain in the table below, click + to add a row, search for the domain, and check the indicated boxes:

Domain Security Policy	Get	Put
Worker Data: Personal Information	✅	—
Worker Data: Contact Information	✅	—
Worker Data: Public Worker Reports	✅	—
Worker Data: Organization Information	✅	—

5. Click OK to save.

---

Step 4: Activate Security Policy Changes

Permissions do not take effect until this step is completed.

1. Search for "Activate Pending Security Policy Changes" and select the task.
2. Add a comment describing your changes (e.g., "Granted imper.ai helpdesk integration permissions").
3. Check the Confirm checkbox.
4. Click OK.

---

Step 5: Create a Workday Report (RAAS)

imper.ai polls this report once every 24 hours to build and refresh the employee profile data used for verification questions.

1. In the search bar, type "Create Custom Report" and select the task.

2. Enter a Report Name (e.g., imper.ai Helpdesk Verification) and select Simple as the report type.

3. Set the Primary Business Object to Worker.

4. Add the following fields to the report output:

Field	Used as verification question
Employee ID	"What is your employee ID?"
First Name	Identity baseline
Last Name	Identity baseline
Manager	"Who is your direct manager?"
Department	"What department are you in?"
Job Title	"What is your job title?"
Location	"What office or location are you based in?"
Start Date (Hire Date)	"When did you start at the company?"
Work Email Address	Identity baseline / contact fallback

5. In the Filters tab, add a filter to limit results to Active workers only (Status = Active).

6. In the Share tab, share the report with your ISU (imperai_ISU) so it has access.

7. In the Web Service tab, enable Enable as a Web Service and note the generated Report URL — you will need it in the next step.

---

Connect Workday in imper.ai

1. Sign in to the imper.ai admin console.
2. Click Integrations in the left navigation panel.
3. Locate Workday under Helpdesk Integrations and click Connect.
4. In the connection dialog, fill in the following fields:
   • ISU Username
   • ISU Password
   • Report URL (the RAAS endpoint from Step 5)
5. Click Connect.

Once connected, Workday will appear under My Integrations with a Connected status. imper.ai will begin polling the report on its next scheduled run and the helpdesk verification flow will be able to draw questions from your Workday employee data.