As part of Simpplr's app tiles feature, we offer several out-of-the-box app tiles your org can set up on home and site dashboards. The article linked below gives an overview of how app tiles work, permissions around setting them up, and various requirements. 

Setting Up Out-of-the-Box App Tiles on Dashboards

This article explains the Workday tile.

Workday tile

With the Workday app tile, you can:

• Display open jobs from your ATS
• Display messages from your Workday inbox
• Display time-off balance on a Simpplr intranet tile
• Apply for PTO
• View paystubs
• View any assigned courses in Workday

Before setting up the Workday integration, ensure you have the following details:

• Workday admin access: You must have admin access to the Workday account from which you wish to list jobs and inbox
• Workday Username (Integration system user name)
• Workday Password (Integration system password)
• Workday Endpoint URL: This is the user syncing url and can be found in the location of your Workday JSON report. You must find this by navigating to your JSON report that contains your user list within Workday. Copy and paste that JSON endpoint URL into the box in Simpplr. Only Admins of Workday can perform this.
• Workday WSDL URL
• Workday Tenant ID

• Api Client

  • Client Id

  • Client Secret

  • Refresh Token: It must be a non-expiring Refresh token

Check out this Microsoft help article for full instructions on:

• Creating an Integrations System User (ISU) in Workday
• Creating integrations security group in Workday
• Configuring domain security policy permissions and Configuring business process security policy permissions

Workday Domain Security Permissions for App Tiles

To ensure the Workday app tile functions correctly, the following security permissions must be granted to the Integration System User (ISU) or the security group it belongs to.

We need to add the following permissions required for the app tile:

Domain Security Policy Permissions

•  
  • Business process security policy permissions (for Tiles)

To configure Business Process permissions required for tile visibility and functionality:

Search: Edit Business Process Security Policy

Add your security group to the relevant policies and actions listed below:

Reminder: After updating these security policies, be sure to activate the pending changes in Workday.

• Activating security policy changes

Workday tile

We need to update the documentation at the following location:
Workday App Tile Behavior and Configuration Guide

With the Workday App tile, you can:

• Display open jobs from your ATS

• Display messages from your Workday inbox

• Display time-off balance on a Simpplr intranet tile

• Apply for PTO

• View paystubs

• View any assigned courses in Workday

Before setting up the Workday integration, ensure you have the following details:

• Workday admin access: You must have admin access to the Workday account from which you wish to list jobs and inbox

• Workday Username (Integration system user name)

• Workday Password (Integration system password)

• Workday Endpoint URL: This is the user syncing url and can be found in the location of your Workday JSON report. You must find this by navigating to your JSON report that contains your user list within Workday. Copy and paste that JSON endpoint URL into the box in Simpplr. Only Admins of Workday can perform this.

• Workday WSDL URL

• Workday Tenant ID

• Api Client

  • Client Id

  • Client Secret

  • Refresh Token: It must be a non-expiring Refresh token

Check out this Microsoft help article for full instructions on:

• Creating an Integrations System User (ISU) in Workday

• Creating integrations security group in Workday

• Configuring domain security policy permissions and configuring business process security policy permissions. Here are the required permissions

• Activating security policy changes

If this is your first time setting up Workday in Simpplr: 

1. As the Simpplr app manager, go to Manage > Application > Integrations > People data
2. Select Workday and enter the required information gathered in the above section.

If your org is already connected to Workday for user syncing: 

1. From the Manage > Application > Integrations > People data menu, you'll see additional options required to fill out. Click Additional details (optional)

2. This is where you'll enter the Workday WSDL URL, Workday Tenant ID, and API client details.

Additional Setup Required for REST API-based Time Off Tiles

Prerequisites

• You have Administrator permissions in your Workday instance

Step 1: Register a New API Client for Integration

1. In the Search field, select Register API Client for Integrations.
2. On the registration page:
   • Enter the Client Name
   • Define Scope (Functional Areas)
   • Check:
     • Non-Expiring Refresh Tokens
     • Include Workday Owned Scope
   • Add the following scopes:
     • Staffing
     • Time Off and Leave
     • Tenant Non-Configurable
     • Public Data
3. Click OK, then save the Client secret and Client ID
4. Enter these credentials during the app linking flow
5. Click Next.

Step 2: Generate a Non-Expiring Refresh Token

1. Search: View API Client
2. Go to API Clients for Integrations tab and save the Token Endpoint
3. Click on the API client you registered
4. Click the three dots > API client > Manage refresh tokens for integrations
5. In the Workday account field, enter a user and generate the refresh token

Note:

These Client ID, Client Secret, and Refresh Token must be added in Workday > Manage page > Integration > People data section.

Segmeted security group configuration

1. Search for Create Security Group
2. Select Segmented Security Group
3. Create the group and map the ISU to it
4. Assign all the domain and business process permissions mentioned above to this security group

Configure business process permissions for REST API

1. Search: Edit Business Process Security Policy
2. In the popup, search for: "Request Time Off (REST Service)"
3. In the Enter Time Off (Web Service) section, add the integration security group you created
4. In the Request Time Off (REST Service) section, add the segmented security group

If this is your first time setting up Workday in Simpplr: 

1.  
   1. As the Simpplr App manager, go to Manage > Application > Integrations > People data.
   2. Select Workday and enter the required information gathered in the above section.
      

If your org is already connected to Workday for user syncing: 

1.  
   1. From the Manage > Application > Integrations > People data menu, you'll see additional options required to fill out. Click Additional details (optional).
      
   2. This is where you'll enter the Workday WSDL URL and Workday Tenant Id.
      

Create Workday App tile

1.  
   1. When adding a new tile to the dashboard, choose App tile, then select Workday.
   2. Here you can create a new job postings tile, display your time-off balance, or display your inbox. We'll start by creating a job postings tile.
      
   3. Give your tile a title and choose Add to home. The relevant job postings you have access to will display. 
      
   4. To set up an inbox tile, choose Display inbox. Title the tile accordingly, and choose the settings you'd like to use. A user defined inbox will allow each Simpplr user to define which inbox they want to see. An App manager defined inbox will display the inbox that you (the App manager) chooses.
      

1.  
   1. Go to Manage > Application > Integrations > People data > Workday
   2. Enter the Workday username and password
   3. And for workday endpoint use this report url [PLACEHOLDER]
   4. You can update data using
   5. Now go to Manage > Application > People > Provision and sync users
   6. Select Workday as the syncing source
   7. Select all the fields you want to sync (Employee number in our case)
   8. Now go to Manage > Application > Setup > Schedulers > Run sync
   9. Once the data is synced, a new profile data field will appear for Employee number
      

Display time-off balance with Workday

This tile allows end users to view their time-off balances directly on the dashboard.

When enabled, the tile displays:

•  
  • Leave category (e.g., Time Off or Leave of Absence)
  • Leave type
  • Remaining leave
    
• This is the third option for Workday, alongside the existing view "Inbox" and "Job Posting" app tiles.

Additional setup requirements

• WSDL URL and Tenant ID
• API Client Setup (see the Workday Integration setup doc here ):
  • Users must create an API client to obtain the Client ID, Client Secret, and Refresh Token. Refer to the image below for detailed setup information.
    

Apply for PTO in Workday

• Allows users to submit PTO requests directly from the intranet tile to Workday
• Displays:
  • Time off category selection
  • Start & end date-pickers
  • Comments field
    
    
• Disclaimers
  • Users can apply for a maximum date range of 30 days in a single request
  • Only time-off leaves are supported
  • By default, Saturday and Sunday are assumed to be weekly off (can be edited by clicking Edit amount)

Prerequisites & additional setup

• API Client Setup:
  • Users must create an API client to obtain the Client ID, Client Secret, and Refresh Token. Refer to the image below for detailed setup information
• The configured ISU user must have the following permissions:
  Reports: Worker Data: Public Worker Reports, Worker Data: Leave of Absence, Set Up: Time Off (Calculations - Absence Specific), Set Up: Leave of Absence, Worker Data: Time Off (Time Off), Worker Data: Time Off

Display assigned Workday courses

• Allows end users to view their assigned LMS courses from Workday
• Displays:
  • Course name
  • Skill level
  • Number of lessons in the course
  • Course registration date
    
    

Prerequisites & additional setup

•  
  • Username, password, WSDL URL, and Tenant ID are prerequisites and must be added in Manage > Application > Integration > People data.
    
    
  • The configured username must have the following permissions:
    Reports: Learning Record, Manage: Learning Content, and Set Up: Learning Catalog.

Display list of Workday paystubs 

• Provides a view of recent paystubs from Workday
• Displays:
  • Pay period
  • Net pay amount
  • Taxes
  • Deductions

Prerequisites & additional setup

•  
  • Username, password, WSDL URL, and Tenant ID are prerequisites and must be added in Manage > Application > Integrations > People data.
  • Employee number/ID should already be synced to Simpplr.
  • The configured username must have the following permissions:
    Reports for Pay Calculation Results (Audits, Payslips, and Results) and Worker Data for Payroll (Limit Overrides, Payment Elections, Payroll Input, and Payslips).
  • Tile author (creator) must provide the workday pay slip URL to view the full list of pay slips in Workday