Overview

This integration connects Workday Recruiting with imper.ai to secure interviews throughout the hiring process. It enables protection and verification for interviews that are managed and scheduled directly within Workday, helping prevent impersonation and candidate fraud.

This guide covers the shared Workday setup - creating an Integration System User (ISU), granting it access through a security group, and getting the Recruiting WSDL URL (Steps 1-5) - then connecting in imper.ai (Step 6). For the connection, we recommend authenticating with an OAuth API client (see Connecting with OAuth), but it isn't required - you can also connect with the ISU username and password.

NOTE

The setup requires Workday admin access to complete the configuration steps. To connect and manage the Workday integration in imper.ai, users must have admin role.

---

Workday Integration Setup Overview

The setup process consists of 6 steps - Steps 1-5 are completed in Workday, and Step 6 in the imper.ai admin interface:

1. Create an Integration System User (ISU)

2. Create a security group

3. Grant permissions to the security group

4. Activate security policy changes

5. Get the Recruiting WSDL URL

6. Connect Workday to imper.ai

Setup

Log in to your Workday tenant as an administrator and follow these steps to setup Workday:

Step 1: Create an Integration System User (ISU)

1. In the search bar, type**"Create Integration System User"** and select the task

Search for "Create Integration System User" task

2. In the “Create Integration System User” form, enter the following details:

   1. User Name: imperai_ISU (of any name you of yout choice)

   2. Password: Use a strong password (avoid special characters)

   3. Require New Password at Next Sign In: Uncheck

   4. Do Not Allow UI Sessions: mark as Checked

3. Click OK

   1. 

Create Integration System User Form

ISU Summary

4. Note: Save the Username and Password - you'll need them at later steps.

5. Search for**“Maintain Password Rules”** and open the task.

   1. Add your ISU to the “System Users Exempt from Password Expiration” field to ensure the integration remains active and is not disrupted by password expiration.

Step 2: Create a Security Group

1. In the search bar, type "Create Security Group" and select the task

2. From the Type of Tenanted Security Group dropdown, select: Integration System Security Group (Unconstrained)

   1. Name it: imperai_SG (of any name you of yout choice)

   2. Click OK

   3. On the next screen (Edit Integration System Security Group), add your ISU (imperai_ISU) to the group

   4. Click OK

Create Security Group

Step 3: Grant Permissions to the Security Group

You'll use the "Maintain Permissions for Security Group" task to configure all domain permissions in a single screen.

3a. Open the Permissions Screen

1. In the Workday search bar, type**"Maintain Permissions for Security Group"** and select the task.

2. In the dialog that appears:

   1. Operation: Select "Maintain"

   2. Source Security Group: Search for and select imperai_SG (the group you created in Step 2)

   3. Click OK

Maintain Permissions for Security Group

3b. Add Domain Permissions

You will now see a screen with the Domain Security Policy Permissions section. This is where you add all the permissions imper.ai needs.

1. Scroll down to theIntegration Permissions section

2. For each domain in the table below, click the + (add row) button

3. Search for and select the domain name

4. Check the Get box (and Put box where indicated)

5. Follow the table below to set permissions. Once all 8 domains are added with the correct checkboxes, click OK to save

Domain Security Policy	Get	Put
Candidate Data: Job Application	✅	-
Candidate Data: Personal Information	✅	-
Candidate Data: Interview Schedule	✅	-
Candidate Data: Other Information	✅	-
Job Requisition Data	✅	-
Manage: Candidates	✅	-
Worker Data: Public Worker Reports	✅	-
Interview Integrations	✅	-

Step 4: Activate Security Policy Changes

This is critical - your permissions won't take effect until you activate them.

1. Search for "Activate Pending Security Policy Changes" and select the task.

2. Add a comment describing your changes (e.g., "Granted imper.ai integration permissions")

3. Check the Confirm checkbox

4. Click OK

Activate Security Policy Changes

Step 5: Get the Recruiting WSDL URL

1. Search for**"Public Web Services"** and open the report

2. Find Recruiting in the list

3. Hover over it → click the three dots (...) → select Web Service > View WSDL

4. On the page that opens, scroll to the very bottom

5. Copy the URL. it will look like: https://wd5-services1.myworkday.com/ccx/service/{tenant}/Recruiting

Choose how to connect

You've now completed the shared Workday setup. imper.ai can authenticate to Workday in two ways - we recommend OAuth, but it isn't required:

• OAuth (recommended) - more secure: it uses a revocable, scoped token instead of a stored password. Continue to Connecting with OAuth to register an API client and generate a refresh token (it reuses the ISU, security group, and WSDL URL you created above), then finish with Step 6 below.

• ISU username and password - connect with the ISU credentials from Step 1. Continue to Step 6 below.

Step 6: Connect Workday to imper.ai

1. Login to imper.ai as an admin user

2. Navigate to Integrations page

3. Search for Workday and click Connect

4. A dialog will open. Choose your authentication method, enter the matching fields, and click Connect:

   • OAuth (recommended): Client ID, Client Secret, Refresh Token, WSDL URL

   • ISU username and password: ISU Username, ISU Password, WSDL URL, Webhook URL

imper.ai admin console: Workday integration