Who can use this feature?
Available on:
All Culture Amp subscriptions.
You can sync employee data directly from Workday into Culture Amp using a secure, one-way connection (Reports as a Service - RaaS). This ensures your employee list and demographics are always up-to-date.
Data Flow: Employee Data flows from Workday into Culture Amp (one-way sync). Changes made in Culture Amp will not sync back to your HRIS.
Initial Setup Timeframe: The full setup and validation process for Workday typically takes 1–2 weeks. Timelines are good-faith estimates and fluctuate based on the complexity of your data model and the responsiveness of internal technical stakeholders during testing. We recommend involving your Workday administrator early in the process to ensure report and ISU configurations are set up correctly.
Choosing Your Integration Method
We offer two primary ways to connect your employee data. The table below briefly outlines both and should help with the decision on which is the best approach for your organization:
Method | Type of Import | Best For | Key Difference |
Full Native Integration | Full Employee Import | Organizations seeking real-time, daily automation of all employee data that the integration supports. | Data transfer is handled automatically via a secure native integration. Users with an End Date in the HRIS become former employees instantly upon sync. If an existing Culture Amp user is removed from the Workday report entirely (without an End Date), they are automatically made Inactive as a deactivated user. |
Partial Employee Import | Organizations requiring manual control over file creation or highly unique filtering requirements. | You generate a data file and securely transfer it to Culture Amp at scheduled intervals. Unlike the native integration, users missing from an SFTP file are ignored rather than deactivated, unless an explicit End Date is included in the file. |
Integration Checklist
Use this checklist to navigate the Workday integration setup. Each step links to a more detailed section below.
Access Requirements & Terminology — Prerequisites and system logic.
Step 1: Create Custom Report — Setting up the RaaS report in Workday.
Step 2: Generate Report Credentials — Generating the JSON URL and ISU credentials.
Step 3: Connect Integration — Entering credentials into Culture Amp.
Step 4: Field Mapping — Aligning Workday fields with Culture Amp.
Step 5: Run First Sync — Reviewing and importing employee records.
Troubleshooting/FAQs — Solving errors, workarounds, and useful tips
Before You Start: Access Requirements
To set up the connection, you'll need:
Access to Workday with permissions to create Custom Reports and Integration System Users (ISU).
Access to Culture Amp with Account Administrator or Employee Data Administrator permissions.
Important Considerations & Data Limitations
Important Considerations & Data Limitations
RaaS & JSON Focus: The integration specifically targets a Workday report enabled as a Web Service in JSON format. It does not use a standard REST API.
Test Environment: Culture Amp does not have a formal test environment for Workday. To validate your data before going live, run a manual sync once connected to review the Import Summary. You can cancel the sync before the data is applied to your production account.
Whitespace & Underscores: Workday replaces spaces in demographic headers with underscores during transfer (e.g., "Office Location" becomes
Office_Location). We recommend following the Workday mapping process before your first sync to prevent duplicates.Value-Level Mapping: Culture Amp can map demographic headers (titles) only. Any data cleanup for values (e.g., converting "Dept_602" to "Marketing") must be performed within Workday.
Project Planning & Timelines: Plan for a setup and validation window of 1–2 weeks. This timeframe depends on the complexity of your data model and the responsiveness of internal technical stakeholders.
Hierarchy Data: Include both
ManagerandManager_Emailin your report. To ensure the hierarchy builds correctly, leave the Manager Email field blank for the top leader in your organization.
🔐 Required Permissions & Rationales
🔐 Required Permissions & Rationales
Permission/Role | Needed in Workday | Rationale |
ISU (Integration System User) | Security Groups | The background service account used to fetch employee data. |
Enable as Web Service | Report Definition | Essential: Allows the report to be accessed via the RaaS API. |
View Access | Security Group / Domain Security Policy | The ISU must have "View" access to all data domains included in the report (e.g., Personal Data, Contact Data). If this is missing for a specific field, the sync will finish but show "Blank Values" for that demographic. |
Step 1: Create a Custom Workday Report
In Workday, create a custom JSON report that includes your required fields and all users who should be active in Culture Amp.
Report Configuration (The "Must-Haves")
Report Configuration (The "Must-Haves")
Before adding fields, ensure your report meets these structural requirements:
Report Type: Must be an Advanced report.
Format: Must be set to JSON.
Web Service: Check "Enable as Web Service" in the report settings.
Ownership: The report owner (ISU) must have access to all demographics included.
Workday Configuration Reference
Workday Configuration Reference
Use the following visual guide to ensure your report settings are compatible with Culture Amp.
Note: These screenshots may vary slightly depending on your Workday UI version. If you get stuck, please contact your Workday administrator.
Report Builder & Filter: When adding fields, use the Column Heading Override XML Alias to ensure your field names match Culture Amp's expectations (e.g.,
Birth_DateandStart_Date).Filtering Your Population: Use the Filter tab to define which employees are sent to Culture Amp. Any employee already in Culture Amp but excluded here will be made inactive upon sync.
Enabling Web Services Under the Advanced tab, ensure the Enable As Web Service checkbox is selected. This generates the RaaS endpoint.
Sharing with the ISU: Navigate to the Share tab and ensure the report is shared with the Integration System User (ISU) created for Culture Amp.
Field & Data Requirements
Field & Data Requirements
Inclusion: Include all employees you wish to be active in Culture Amp.
Required Fields: At a minimum, include
Name,Email, andEmployee_ID.Date Formats: Use
YYYY-MM-DD,mmm dd, yyyyorMMM DD YYYY.Tip: Apply a
yyyy-MM-ddformat mask to calculated fields or set the ISU to theen_USlocale.
XML Overrides for Age and Tenure: Culture Amp looks for
Birth_DateandStart_Dateto trigger automatic Age and Tenure banding. Use XML override columns to change your fields to these titles if they differ.Standard Formatting: See our standard Employee Data Template for other formatting tips.
Advanced Logic and Filtering
Advanced Logic and Filtering
Calculated Fields: If you are using calculated fields for logic, ensure the ISU has permission to view the underlying data sources.
Excluding Employees: You can use Workday filters to exclude specific employee types. Alternatively, create a custom field called Exclude from Culture Amp; users with this field set to "Yes" will not be imported. Refer to the field mapping section for more information.
Step 2: Generate Report Credentials
Before connecting to Culture Amp, you must identify and retrieve the specific credentials from your Workday instance.
URL in JSON format: Locate the endpoint under Web Service > View URLs in Workday. Note that the end of the URL specifies the report format.
Username: The specific integration Username (not an email address) for the Integration System User (ISU).
Password: The unique Password associated with the ISU.
Tip: To speed up the configuration, you can introduce Culture Amp Support directly to your IT team or Workday representative. We recommend verifying these credentials by pasting the JSON URL into your browser; if you can log in using the ISU credentials and see raw data, the credentials are valid.
Step 3: Connect and Authenticate Your Workday Account
Now that your report is configured and you have your credentials ready, follow these steps to establish the technical connection.
Sign in to Culture Amp with an account that has Account Administrator or Employee data administrator access.
Navigate to your Settings > Account > Integrations page.
Select the Workday tile from the list of integrations.
Enter the Username, Password, and URL you retrieved in the previous step.
Click Validate Credentials
Enable Daily Syncs (Optional): If enabled, your data will automatically sync every day between midnight and 4:00 am (International Date Line West). If disabled, you must trigger syncs manually.
Select Notification Email: Choose the Email Address to receive prompts regarding blocked syncs and other integration communications (this must belong to an Account Administrator or Employee data administrator).
Click Save Integration > Finish
Note: Workday can occasionally take a long time to respond to credential validation requests. If the process takes longer than 1 minute, the linking flow may time out and display a generic error. This is typically due to limited API server resources on the Workday side. If this occurs, simply re-attempt the validation.
Step 4: Setting Up Workday Field Mapping
Once you have successfully authenticated your connection in Step 3, you must contact Culture Amp Support to complete your Workday field mapping for any custom fields. Please ensure the integration is active on your Data Integrations page before submitting your mapping request. This step is essential because Workday automatically replaces spaces in custom field headers with underscores during the transfer process (e.g., "Office Location" becomes Office_Location). Mapping ensures your data remains clean and prevents the creation of duplicate demographics (e.g., Manager_Name vs. Manager Name).
Note: Core demographic fields are unique because they sync automatically from your report without underscores. Because these fields are pre-formatted by the system, they do not need to be included in your custom Workday field mapping request.
Core Demographics: Automatic Mapping
Core Demographics: Automatic Mapping
The following core demographics sync automatically from your report without underscores. These demographics should not be included in the custom workday mapping request you send to Support.
Typical Workday UI Label | Culture Amp Field Name (Destination) | Notes |
| Unique Identifier | |
| Employee ID | Unique Identifier |
| Name | Ensure this includes both first and last names. |
| Preferred Name | Can be used for survey and cycle communications. |
| Start Date | Used for Tenure reporting. Use XML Override to rename this field if you have it titled anything else. |
| Date of Birth | Used for Age reporting. Use XML Override to rename this field if you have it titled anything else. |
| End Date | Used for Tenure reporting. Use XML Override to rename this field if you have it titled anything else. |
Custom Fields: Manual Mapping
Custom Fields: Manual Mapping
To ensure your custom fields display correctly without underscores, you must provide Culture Amp Support with a mapping file.
Requirements for the Mapping Request: To complete the mapping, provide the Culture Amp Support team a sheet with two columns:
Workday Field Name: The demographic label exactly as it appears in Workday, including underscores.
Culture Amp Field Name: The clean demographic label you would like displayed in Culture Amp.
Example:
Workday Field Name (Source) | Culture Amp Field Name (Destination) | Rationale |
| Job Title | Removes the underscore to ensure a clean display in reports. |
| Location | Renames the field for internal consistency while removing underscores. |
| Manager Email | For those with an existing hierarchy, this must match your validated hierarchy demographic title to update successfully. Without this mapping, Culture Amp sees |
Note: Mapping is only required if you need to rename a field or remove underscores. If a demographic title is already correct and contains no spaces (e.g., "Department"), it can be omitted from the mapping sheet.
Value-Level Mapping Limitations
Mapping only applies to demographic titles (e.g., Location), not the values within them (e.g., London). If demographic values in Culture Amp differ from those in Workday, you have two options:
Demographic Comparison Mapping: Use this separate process to ensure values that have changed names remain eligible for comparison in surveys.
Manual Value Updates: Before your first sync, navigate to Settings > Employee Data > Demographics in Culture Amp and edit values to match how they appear in Workday.
Excluding Employees: Optional
Excluding Employees: Optional
If you need to prevent specific groups of employees (such as contractors or specific legal entities) from being imported into Culture Amp, you should manage this directly within your Workday report configuration.
Method 1: Workday Report Filters (Recommended)
The most effective way to exclude users is by applying filters to your custom report in Workday.
How it works: Use the Filter tab in your Workday report builder to define specific inclusion or exclusion criteria (e.g., Employee Type is none in the selection list Contractor).
Impact: Any employee filtered out of the report will not be sent to Culture Amp. If an existing Culture Amp user is removed from the report via these filters, they will be made inactive as a former user upon the next sync.
Method 2: "Exclude from Culture Amp" Custom Field
If your filtering logic is too complex for standard report filters, you can use a custom field to flag individuals for exclusion.
How it works: Create a custom field in your Workday report titled exactly:
Exclude from Culture Amp.Logic: For any employee where this field is set to "Yes", Culture Amp will ignore the record and will not import or update them during the sync.
Note: Because the Workday integration uses a Full Import process, it treats the report as your "source of truth".
If an employee is currently Active in Culture Amp but is excluded from your Workday report in the future, the system will assume they have left the organization and mark them as a former employee.
If you prefer that these users are treated as deactivated instead of "former," please reply with "Ask a Person" in a Support Conversation to speak with a Product Support Specialist who can adjust your default account settings.
Step 5: Sync Your User Data
You can now begin syncing your employee data. Even if you have enabled daily syncs, we recommend running a manual sync initially to verify your mapping and data health.
Click Sync on the Data Integrations page
Review the Import History to ensure all users and demographics are accounted for.
Verify Hierarchy: At this stage, you can confirm if your manager data is flowing correctly. If you have an existing hierarchy, ensure the manager email data is populating the exact validated field identified by the hierarchy icon.
If comfortable, click Confirm to finalize the sync.
If errors appear, click Cancel to stop the sync and troubleshoot the flagged issues.
Add or Update Your Hierarchy
The process for managing your hierarchy depends on whether you have previously validated a hierarchy demographic in Culture Amp.
Confirm your Path
Confirm your Path
Existing Hierarchy: If you have already validated your hierarchy in the past, the Workday integration will update it automatically as long as you have set up your Workday field mapping to point to the exact demographic title currently used for your hierarchy.
New Hierarchy: If you have never validated a hierarchy in Culture Amp before, we recommend completing your first Workday sync, then follow the manual validation process outlined in our Add Your Hierarchy guide.
Identify or Prepare your Hierarchy Demographic
Identify or Prepare your Hierarchy Demographic
The steps below ensure your Workday data correctly targets the hierarchy anchor in Culture Amp.
For customers with an existing hierarchy:
Before your first sync, verify the exact demographic title Culture Amp uses to build your organizational tree:
Navigate to Settings > Employee Data > Demographics.
Look for the hierarchy icon and note the title exactly as it appears (e.g., "Manager Email").
Important: Your Workday mapping must match this title verbatim. Because Workday adds underscores (e.g.,
Manager_Email), you must have Support map this to your clean title (e.g.,Manager Email) before your first sync. If the titles do not match exactly, the hierarchy will not update.
For customers setting up hierarchy for the first time:
Decide on your hierarchy anchor (Manager Email is recommended).
Ensure this field is included in your Workday report and mapped by Support during Step 4.
Once your first sync is successful, you will then proceed to our Add Your Hierarchy guide to perform the one-time validation.
Hierarchy Requirements & Gotchas
Hierarchy Requirements & Gotchas
To ensure your hierarchy syncs correctly, adhere to the following logic:
Identifier Type: Use Manager Email (recommended) or Manager ID. You cannot validate or sync a hierarchy based on Manager Name.
Data Inclusion: Ensure all managers are included in your Workday RaaS report. If a manager is missing from the sync file, their direct reports cannot be correctly placed in the hierarchy.
Top Leader: Leave the Manager Email field blank for the leader of your organization to establish the top of the tree.
Refer to the Add Your Hierarchy article for full guidance.
Troubleshooting/FAQs
General Data Integrity & Import Management
The first step when investigating any data issue is to check the Import Summary Screen for your most recent import.
Go to Settings > Employee Data > Import History.
Select your most recent import to view details.
This screen provides information on the state of your integration, any specific errors, or will prompt you to run a manual sync to identify problems.
Common Workday Integration Errors
Common Workday Integration Errors
Error Message | Potential Cause | Suggested Fix |
Invalid credentials | The Username, Password, or Report URL provided in Culture Amp does not match on Workday. | Verify that the Integration System User (ISU) credentials are correct and the Report URL is the JSON endpoint from Workday. |
Re-hired employees are missing or inactive | The sync detects a historical End Date that is more recent than the new Start Date. Since Workday doesn't automatically clear old End Dates, the system assumes the user is still terminated. | Option 1 (Distant Future Dates): Assign a date like Option 2 (Calculated Field):
|
Expected users are missing from the sync | Workday report filters may be too restrictive. | Check your Workday report filters to ensure you haven't accidentally excluded specific employee groups. |
Generic Error / Connection Failed | API Timeout. | Workday may be slow to respond to the request. If validation takes over 60 seconds, refresh your browser and re-input your credentials. |
403 Forbidden | The ISU does not have permission to view the report or specific fields within it. | In Workday, ensure the ISU is added to the Report Sharing tab. Also, verify the ISU has "View" access in the Domain Security Policies for all fields in the report. |
404 Not Found | The report URL is incorrect, "Web Services" is disabled or the report has been deleted/renamed in Workday. | Double-check the URL in Culture Amp. Ensure "Enable as Web Service" is checked in the Workday Report Definition. |
Blank values or missing demographics | The ISU lacks permission to view specific domains or calculated field dependencies. | Domain Access: Ensure the ISU has "View" access to the relevant domains (e.g., 'Worker' object). Calculated Fields: If using calculated fields, the ISU needs permission for every underlying field used in the logic. (See Proxy Testing below). |
Start Date or Date or Birth not syncing | Culture Amp expects specific naming conventions for these demographics, and they may be titled differently on Workday. | Ensure you've named these core demographics |
Unexpected underscores in titles | Workday converts spaces to underscores (e.g., Job_Title) by default. | This is expected behavior for Workday. Contact Culture Amp Support to apply Workday field mapping to convert these back to spaces. |
How to Troubleshoot Missing Data (Proxy Testing)
If your sync is successful but specific data is missing, you likely have a permissions gap. Workday often returns a blank value rather than an error message when permissions are missing.
What to Check:
Domain Access: Ensure the ISU has permission to view the relevant security domains for the Business Object (e.g., the ‘Worker’ object).
Calculated Field Dependencies: If using calculated fields, the ISU must have permission to view every underlying field used in the logic/conditions.
To see exactly what Culture Amp "sees," view the report results as the ISU:
Login as the ISU: Use the Integration User’s credentials to log in to Workday.
Download JSON: Download the
.jsonreport while logged in as that user.Note: If you don't know the ISU password, perform this in your Sandbox environment first so you can reset the password without breaking the production sync.
Verify Data: If the JSON file is missing values that you can see under your own admin profile, you have a permissions gap.
Reminder: If you reset the ISU password in Production, you must update the credentials in the Culture Amp Data Integrations page immediately.
Integration Permissions in Workday (Domain Security)
Switching From CSV or Other Imports
Switching From CSV or Other Imports
If you are moving from CSV uploads or a different integration, keep the following in mind:
Demographic Consistency: When mapping fields, you must map the data to the exact same demographic field you used historically (e.g., mapping to "TEAM" is different from mapping to "TEAM NAME"). Using an incorrect or slightly different title risks discontinuity in your trended survey results.
Recommended Action: To avoid confusion, we recommend navigating to Settings > Employee Data Demographics and deleting the old, unused demographics after your first successful sync. (This won't impact any previous survey results.)
Handling Duplicate Employees
Handling Duplicate Employees
Culture Amp uses two fields as unique identifiers for user profiles: Email and Employee ID.
As long as at least one of these remains consistent between Workday and Culture Amp, the sync will successfully update the existing profile rather than creating a new one.
Duplicate Risk: If you change both the Email and the Employee ID simultaneously in Workday, the sync will not find a match and will create a duplicate profile.
If you see a duplicate profile error flag during your import, take the following steps:
Scenario | Action to Take |
A. Before Changes Are Applied | During the first sync review screen, stop the sync. Update the employee emails in Culture Amp to match those in Workday.
|
B. After Changes Are Applied | To clean up the duplicated profiles:
|
Further Guidance | Check out our dedicated support guide for further information on duplicate employee clean-up. |
Sync Blocked to Protect Employee Privacy
Sync Blocked to Protect Employee Privacy
Your automated daily sync might be blocked if Culture Amp detects a high-risk change for an employee. You will receive an email notification if this occurs.
When It Happens: The sync is blocked if a combination of an employee's Name, Date of Birth, or Email is changed simultaneously.
Purpose: This prevents one employee from accidentally getting access to another employee's private information (like performance reviews).
Fix: If you've intentionally changed the employee's details, you can run a manual sync to push the change through. Go to Settings > Employee Data > Users, click Import data, and select Sync. Culture Amp will guide you through the rest.
💬 Need help? Just reply with "Ask a Person" in a Support Conversation to speak with a Product Support Specialist.












