Discussion of use cases and implementation experience integrating with Workday

["Michael W. Brogan" <>]

Anil,

At the University of Washington, our pre-production system deals with 
employees, contingent workers, and academic affiliates. Our IAM system 
controls the Workday IDs via an integration with Workday's SOAP API, so they 
all have the same format of 
.
 We haven't identified a use case for social IDs in Workday at the UW (yet), 
so haven't had to deal with those identifiers.

Michael W. Brogan
Technical Lead, Identity and Access Management
UW Information Technology, University of Washington
206-685-7521


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Kadiyala, Anil
Sent: Wednesday, December 02, 2015 5:38 AM
To: 

Subject: RE: [InC-Workday] More than one IdP support?

Much of the trouble with Workday SSO is the way it creates and stores 
different categories of users namely Applicants, Workers, Affiliates, 
Contingent workers etc. in separate buckets. They use different formats of 
user names for each of these categories. Having a proxy IdP, it would be 
difficult to normalize these IDs, unless you manage all their WD specific 
usernames, which defeats the social integrations. At U of Miami, we intend to 
go live with WD recruiting sometime during second quarter of 2016. We 
explored the option of SSO in vainly and for now allowing applicants to 
manage their logins with a separate registration process with WD. Interested 
in proxy option, otherwise.

Cheers,
Anil Kadiyala
UofMiami IT


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Michael R Gettes
Sent: Wednesday, December 02, 2015 8:18 AM
To: 

Subject: Re: [InC-Workday] More than one IdP support?

Thanks Dave!

Given Dave’s response, I have a followup question.  :-)

Does anyone have practical experience and/insights towards the use of an IdP 
Proxy with Workday?

Thanks so much!

/mrg

> On Dec 1, 2015, at 13:27, David Langenberg 
> <>
>  wrote:
> 
> Alas, from my view of the screens, there's only 1 IdP which means you'd 
> have to put an IdP Proxy in there if you wanted multiple IdPs.
> 
> Dave
> 
>> On Dec 1, 2015, at 11:13 AM, Michael R Gettes 
>> <>
>>  wrote:
>> 
>> Hi All,
>> 
>> I am seeking experiences and/or insights to the following question...  Can 
>> workday support more than a single IdP?  We are wanting to have a 2nd IdP 
>> for Social Identities accessing workday for job apps/recruiting.  The 
>> hiring process would convert to a “real” institutional ID.
>> 
>> Many thanks!
>> 
>> /mrg
>> 
> 
> 
> --
> David Langenberg
> Identity & Access Management Architect The University of Chicago
>