Connect a people source for Genie One

A people source supplies your organization's people and reporting structure to Azure Databricks. After you connect it, users can browse org directories in Genie One. See Browse org directories in Genie One.

Workday is the supported people source. You connect it on the same Genie Ontology page as your other Genie Search sources.

Requirements

• Account admin privileges
• A Workday admin who can create a custom report, an integration system user, a security group, and an API client

Prepare Workday

Genie Search reads worker data from a custom Workday Reports-as-a-Service (RaaS) report. A Workday admin must set up the report and API access before you connect:

1. Create a custom report over workers that includes the fields in Report fields, and enable it as a web service.
2. Complete the steps in Configure Workday reports for ingestion. The people source requires the integration system user (ISU) and security group steps that the page marks optional. You don't need to configure the report for incremental ingestion.
   • Get the report URL. Copy the JSON URL, and keep format=json at the end.
   • Create an ISU.
   • Create a security group and add the ISU to it.
   • Add domain security policies to the security group.
   • Create an API client, add functional scopes, and generate a refresh token for the ISU.

Report fields

Add the following fields from the Worker business object to the report. Set the XML alias for each field, and the column heading override where one is shown.

Only email and name are required. The org chart links each worker to their manager through workdayID and managerWorkdayID, so include both to show reporting lines. The other fields are optional and add details to profiles.

Field	Column heading override	Column heading override XML alias
Workday ID	Workday ID	workdayID
Preferred Name	Name	name
Manager - Level 01	Manager	Manager_-_Level_01
LRV Manager - Workday ID	Manager Workday ID	managerWorkdayID
Business Title		businessTitle
Email - Primary Work	Email	email
Employee Type		eeType
Currently Active		activeStatus
Hire Date		Start_Date
Location		location
Cost Center		CostCenter
Supervisory Organization		Department
Management Level		Role

Connect Workday

1. In the account console, click Genie Ontology.
2. Click Connect source.
3. Select Workday.
4. Fill in the following:
   • Domain: The host name from your Workday API URL, without https://. For example, wd2-impl-services1.workday.com.
   • Tenant name: Your Workday tenant name. In the report URL, it's the path segment after customreport2/.
   • Client ID and Client secret: The credentials of the API client.
   • Refresh token: The refresh token that you generated for the ISU.
   • Custom report URL: The JSON web service URL of the RaaS report.
   • Data residency Geo: The geo where the people index is stored. All sources in the account must use the same geo. See Storage and location.
5. Click Start ingestion.

Azure Databricks stores the credentials and starts ingestion. After ingestion finishes, the source status changes from Provisioning to Searchable, and org directories appear on the People page in Genie One. See Browse org directories in Genie One.

If Workday rejects the credentials, ingestion fails. Remove the source and connect it again with a valid client ID, client secret, and refresh token.

What is ingested

Org directories include the fields in your worker report. See Report fields. Profile photos come from Workday Human Capital Management (HCM). The Workday connection reads both the RaaS report and HCM, so you don't connect HCM separately. If the credentials that you connect with have access to worker photos in HCM, Azure Databricks ingests the photos too.

Org directories are intended for broad consumption, so include only fields that are meant to be public across your organization. Everyone who uses Genie One in your account can see these fields for every worker in the report, regardless of Workday permissions.

Remove Workday

1. On the Genie Ontology page, click the kebab menu on the Workday row.
2. Click Remove source.
3. Confirm. Ingestion stops, stored credentials are deleted, and ingested worker profiles are purged within 30 days.
4. In Workday, revoke the API client and disable the integration system user.

You can't replace Workday credentials in place. To rotate them, remove the source and connect it again.

Limitations

• There is no API for connecting or updating the source.
• Phone numbers aren't ingested.

Pricing

The people source is part of Genie Search and follows the same pricing. See Genie Search pricing.