How to sync users with Workday

We recommend starting with Integrating Avigilon Alta with Workday® Human Capital Management before proceeding any further.

When an Identity Provider (IDP) creates unique IDs for users, deleting and recreating a user in the IDP results in a new unique ID for that user. If you add the recreated user back into Avigilon Alta, the system will recognize them as a new user due to the new ID, even though the email address is the same. This can cause confusion, as it becomes unclear which version of the user is correct.

You can integrate Workday® Human Capital Management reports with Avigilon Alta to import and sync users automatically.

The Workday integration is similar in scope and functionality to existing IDP integrations (Okta, Azure Active Directory, Google Workspace, and OneLogin). Some of the benefits of the Workday integration include the following:

Persistent User Sync.
Persistent Group Sync (streamlining access levels).
Auto-create mobile credentials.
Manual Sync Option.
Sync every hour or 15 minutes (based on the version of the app).
Standard: 60-minute sync.
Advanced: 15-minute sync.
Sync Employee ID, Department, and Title, which are all new fixed user fields in Avigilon Alta
Auto-remove users from groups.

Note: Workday Web Service API v39.1 or newer is required. In addition, you must have admin privileges in your Workday account to configure custom reports.

To set up the integration

Go to http://control.openpath.com/login and log in. To access the European Alta Access, go to http://control.eu.openpath.com/login.
Under App Marketplace > Get Apps, click on the Workday tile, then click Get App.
Under App Marketplace > My Apps, click on the User Management app, then click the Workday tile you would like to install, the 1-hour sync, or the advanced 15-minute sync.

4. Enter Auth Workday User Name and Password.

5. After testing Auth with Workday, you can enable the following settings:

Note: The manual sync button will force a real-time sync and get a list of changes from Workday.

a. Auto-sync every 1 hour/15 minutes - this will sync Avigilon Alta with Workday once every hour or once every 15 minutes depending on which app version you select.

b. Auto-create mobile credential - this will create a mobile credential for every user.

c. Auto-create cloud key credential - this will create a cloud key credential for every user.

d. Sync Employee ID - This will sync your employee ID number from the Workday ‘Employee_ID’ field to the Person ID User field in Avigilon Alta.

e. Sync Department - This will sync your department name from the Workday ‘Depatment_Name’ field to the Department User field in Avigilon Alta.

f. Sync Title - This will sync the employee’s title name from the Workday ‘businessTitle’ field to the Title User field in Avigilon Alta.

g. Only import users from groups that have an Avigilon Alta group mapping - if this is enabled, no users will be imported from Azure if they are not assigned to an Avigilon Alta group.

h. Auto-remove users from groups - this will remove users from Avigilon Alta groups if they no longer exist in Workday’s required ‘Group’ custom field.

I. Mobile Phone - If you want to sync Mobile phones, you should name the report column mobilePhone. You must use the E.164 format and it is recommended it is an actual mobile phone number and not a landline.

Note: E.164 numbers are formatted [+][country code][subscriber number including area code] with a maximum of fifteen digits.

6. To map a specific group from Workday to Avigilon Alta (required if you enabled Only import users from groups that have an Avigilon Alta group mapping), click +Create Group Mapping.

a. Select the group from Workday.

b. Select the group from Avigilon Alta.

c. Click +Create Group Mapping.

7. Repeat step 6 until all groups that need to be mapped have been created.

Sync Failure Alert in Advanced User Package

The Identity Provider sync failure alert can be enabled under Configurations/Alerts.