Skip to main content

Sync HRIS Data from Workday

Learn how to sync employee data from Workday into Culture Amp

Jared Ellis avatar
Written by Jared Ellis
Updated yesterday

Who can use this feature?

Available on:

  • All Culture Amp subscriptions.

You can sync employee data directly from Workday into Culture Amp using a secure, one-way connection (Reports as a Service - RaaS). This ensures your employee list and demographics are always up-to-date.

Data Flow: Employee Data flows from Workday into Culture Amp (one-way sync). Changes made in Culture Amp will not sync back to your HRIS.

Initial Setup Timeframe: The full setup and validation process for Workday typically takes 1–2 weeks. Timelines are good-faith estimates and fluctuate based on the complexity of your data model and the responsiveness of internal technical stakeholders during testing. We recommend involving your Workday administrator early in the process to ensure report and ISU configurations are set up correctly.

Choosing Your Integration Method


We offer two primary ways to connect your employee data. The table below briefly outlines both and should help with the decision on which is the best approach for your organization:

Method

Type of Import

Best For

Key Difference

Full Native Integration

Full Employee Import

Organizations seeking real-time, daily automation of all employee data that the integration supports.

Data transfer is handled automatically via a secure native integration. Users with an End Date in the HRIS become former employees instantly upon sync. If an existing Culture Amp user is removed from the Workday report entirely (without an End Date), they are automatically made Inactive as a deactivated user.

Partial Employee Import

Organizations requiring manual control over file creation or highly unique filtering requirements.

You generate a data file and securely transfer it to Culture Amp at scheduled intervals. Unlike the native integration, users missing from an SFTP file are ignored rather than deactivated, unless an explicit End Date is included in the file.

Integration Checklist


Use this checklist to navigate the Workday integration setup. Each step links to a more detailed section below.

  1. Access Requirements & Terminology — Prerequisites and system logic.

  2. Step 1: Create Custom Report — Setting up the RaaS report in Workday.

  3. Step 2: Generate Report Credentials — Generating the JSON URL and ISU credentials.

  4. Step 3: Connect Integration — Entering credentials into Culture Amp.

  5. Step 4: Field Mapping — Aligning Workday fields with Culture Amp.

  6. Step 5: Run First Sync — Reviewing and importing employee records.

  7. Troubleshooting/FAQs — Solving errors, workarounds, and useful tips

Before You Start: Access Requirements


To set up the connection, you'll need:

Important Considerations & Data Limitations

  • RaaS & JSON Focus: The integration specifically targets a Workday report enabled as a Web Service in JSON format. It does not use a standard REST API.

  • Test Environment: Culture Amp does not have a formal test environment for Workday. To validate your data before going live, run a manual sync once connected to review the Import Summary. You can cancel the sync before the data is applied to your production account.

  • Whitespace & Underscores: Workday replaces spaces in demographic headers with underscores during transfer (e.g., "Office Location" becomes Office_Location). We recommend following the Workday mapping process before your first sync to prevent duplicates.

  • Value-Level Mapping: Culture Amp can map demographic headers (titles) only. Any data cleanup for values (e.g., converting "Dept_602" to "Marketing") must be performed within Workday.

  • Project Planning & Timelines: Plan for a setup and validation window of 1–2 weeks. This timeframe depends on the complexity of your data model and the responsiveness of internal technical stakeholders.

  • Hierarchy Data: Include both Manager and Manager_Email in your report. To ensure the hierarchy builds correctly, leave the Manager Email field blank for the top leader in your organization.

🔐 Required Permissions & Rationales

Permission/Role

Needed in Workday

Rationale

ISU (Integration System User)

Security Groups

The background service account used to fetch employee data.

Enable as Web Service

Report Definition

Essential: Allows the report to be accessed via the RaaS API.

View Access

Security Group / Domain Security Policy

The ISU must have "View" access to all data domains included in the report (e.g., Personal Data, Contact Data). If this is missing for a specific field, the sync will finish but show "Blank Values" for that demographic.

Step 1: Create a Custom Workday Report


In Workday, create a custom JSON report that includes your required fields and all users who should be active in Culture Amp.

Report Configuration (The "Must-Haves")

Before adding fields, ensure your report meets these structural requirements:

  • Report Type: Must be an Advanced report.

  • Format: Must be set to JSON.

  • Web Service: Check "Enable as Web Service" in the report settings.

  • Ownership: The report owner (ISU) must have access to all demographics included.

Workday Configuration Reference

Use the following visual guide to ensure your report settings are compatible with Culture Amp.

Note: These screenshots may vary slightly depending on your Workday UI version. If you get stuck, please contact your Workday administrator.

  1. Report Builder & Filter: When adding fields, use the Column Heading Override XML Alias to ensure your field names match Culture Amp's expectations (e.g., Birth_Date and Start_Date).

  2. Filtering Your Population: Use the Filter tab to define which employees are sent to Culture Amp. Any employee already in Culture Amp but excluded here will be made inactive upon sync.

  3. Enabling Web Services Under the Advanced tab, ensure the Enable As Web Service checkbox is selected. This generates the RaaS endpoint.

  4. Sharing with the ISU: Navigate to the Share tab and ensure the report is shared with the Integration System User (ISU) created for Culture Amp.

Field & Data Requirements

  • Inclusion: Include all employees you wish to be active in Culture Amp.

  • Required Fields: At a minimum, include Name, Email, and Employee_ID.

  • Date Formats: Use YYYY-MM-DD, mmm dd, yyyy or MMM DD YYYY.

    • Tip: Apply a yyyy-MM-dd format mask to calculated fields or set the ISU to the en_US locale.

  • XML Overrides for Age and Tenure: Culture Amp looks for Birth_Date and Start_Date to trigger automatic Age and Tenure banding. Use XML override columns to change your fields to these titles if they differ.

  • Standard Formatting: See our standard Employee Data Template for other formatting tips.

Advanced Logic and Filtering

  • Calculated Fields: If you are using calculated fields for logic, ensure the ISU has permission to view the underlying data sources.

  • Excluding Employees: You can use Workday filters to exclude specific employee types. Alternatively, create a custom field called Exclude from Culture Amp; users with this field set to "Yes" will not be imported. Refer to the field mapping section for more information.

Step 2: Generate Report Credentials


Before connecting to Culture Amp, you must identify and retrieve the specific credentials from your Workday instance.

Tip: To speed up the configuration, you can introduce Culture Amp Support directly to your IT team or Workday representative. We recommend verifying these credentials by pasting the JSON URL into your browser; if you can log in using the ISU credentials and see raw data, the credentials are valid.

Step 3: Connect and Authenticate Your Workday Account


Now that your report is configured and you have your credentials ready, follow these steps to establish the technical connection.

  1. Sign in to Culture Amp with an account that has Account Administrator or Employee data administrator access.

  2. Navigate to your Settings > Account > Integrations page.

  3. Select the Workday tile from the list of integrations.

  4. Enter the Username, Password, and URL you retrieved in the previous step.

  5. Click Validate Credentials

  6. Enable Daily Syncs (Optional): If enabled, your data will automatically sync every day between midnight and 4:00 am (International Date Line West). If disabled, you must trigger syncs manually.

  7. Select Notification Email: Choose the Email Address to receive prompts regarding blocked syncs and other integration communications (this must belong to an Account Administrator or Employee data administrator).

  8. Click Save Integration > Finish

Note: Workday can occasionally take a long time to respond to credential validation requests. If the process takes longer than 1 minute, the linking flow may time out and display a generic error. This is typically due to limited API server resources on the Workday side. If this occurs, simply re-attempt the validation.

Step 4: Setting Up Workday Field Mapping


Once you have successfully authenticated your connection in Step 3, you must contact Culture Amp Support to complete your Workday field mapping for any custom fields. Please ensure the integration is active on your Data Integrations page before submitting your mapping request. This step is essential because Workday automatically replaces spaces in custom field headers with underscores during the transfer process (e.g., "Office Location" becomes Office_Location). Mapping ensures your data remains clean and prevents the creation of duplicate demographics (e.g., Manager_Name vs. Manager Name).

Note: Core demographic fields are unique because they sync automatically from your report without underscores. Because these fields are pre-formatted by the system, they do not need to be included in your custom Workday field mapping request.

Core Demographics: Automatic Mapping

The following core demographics sync automatically from your report without underscores. These demographics should not be included in the custom workday mapping request you send to Support.

Typical Workday UI Label

Culture Amp Field Name (Destination)

Notes

Email

Email

Unique Identifier

Employee_ID

Employee ID

Unique Identifier

Name

Name

Ensure this includes both first and last names.

Preferred_Name or Preferred_First_Name

Preferred Name

Can be used for survey and cycle communications.

Start_Date

Start Date

Used for Tenure reporting. Use XML Override to rename this field if you have it titled anything else.

Birth_Date

Date of Birth

Used for Age reporting. Use XML Override to rename this field if you have it titled anything else.

End_Date

End Date

Used for Tenure reporting. Use XML Override to rename this field if you have it titled anything else.

Custom Fields: Manual Mapping

To ensure your custom fields display correctly without underscores, you must provide Culture Amp Support with a mapping file.

Requirements for the Mapping Request: To complete the mapping, provide the Culture Amp Support team a sheet with two columns:

  1. Workday Field Name: The demographic label exactly as it appears in Workday, including underscores.

  2. Culture Amp Field Name: The clean demographic label you would like displayed in Culture Amp.

Example:

Workday Field Name (Source)

Culture Amp Field Name (Destination)

Rationale

Job_Title

Job Title

Removes the underscore to ensure a clean display in reports.

Office_Location

Location

Renames the field for internal consistency while removing underscores.

Manager_Email

Manager Email

For those with an existing hierarchy, this must match your validated hierarchy demographic title to update successfully. Without this mapping, Culture Amp sees Manager_Email (with underscore) while your hierarchy is looking for Manager Email (without underscore). This mismatch is the most common cause of hierarchy sync failures.

Note: Mapping is only required if you need to rename a field or remove underscores. If a demographic title is already correct and contains no spaces (e.g., "Department"), it can be omitted from the mapping sheet.

Value-Level Mapping Limitations

Mapping only applies to demographic titles (e.g., Location), not the values within them (e.g., London). If demographic values in Culture Amp differ from those in Workday, you have two options:

  1. Demographic Comparison Mapping: Use this separate process to ensure values that have changed names remain eligible for comparison in surveys.

  2. Manual Value Updates: Before your first sync, navigate to Settings > Employee Data > Demographics in Culture Amp and edit values to match how they appear in Workday.

Excluding Employees: Optional

If you need to prevent specific groups of employees (such as contractors or specific legal entities) from being imported into Culture Amp, you should manage this directly within your Workday report configuration.

Method 1: Workday Report Filters (Recommended)

The most effective way to exclude users is by applying filters to your custom report in Workday.

  • How it works: Use the Filter tab in your Workday report builder to define specific inclusion or exclusion criteria (e.g., Employee Type is none in the selection list Contractor).

  • Impact: Any employee filtered out of the report will not be sent to Culture Amp. If an existing Culture Amp user is removed from the report via these filters, they will be made inactive as a former user upon the next sync.

Method 2: "Exclude from Culture Amp" Custom Field

If your filtering logic is too complex for standard report filters, you can use a custom field to flag individuals for exclusion.

  • How it works: Create a custom field in your Workday report titled exactly: Exclude from Culture Amp.

  • Logic: For any employee where this field is set to "Yes", Culture Amp will ignore the record and will not import or update them during the sync.

Note: Because the Workday integration uses a Full Import process, it treats the report as your "source of truth".

  • If an employee is currently Active in Culture Amp but is excluded from your Workday report in the future, the system will assume they have left the organization and mark them as a former employee.

  • If you prefer that these users are treated as deactivated instead of "former," please reply with "Ask a Person" in a Support Conversation to speak with a Product Support Specialist who can adjust your default account settings.

Step 5: Sync Your User Data


You can now begin syncing your employee data. Even if you have enabled daily syncs, we recommend running a manual sync initially to verify your mapping and data health.

  1. Click Sync on the Data Integrations page

  2. Review the Import History to ensure all users and demographics are accounted for.

  3. Verify Hierarchy: At this stage, you can confirm if your manager data is flowing correctly. If you have an existing hierarchy, ensure the manager email data is populating the exact validated field identified by the hierarchy icon.

  4. If comfortable, click Confirm to finalize the sync.

  5. If errors appear, click Cancel to stop the sync and troubleshoot the flagged issues.

Add or Update Your Hierarchy

The process for managing your hierarchy depends on whether you have previously validated a hierarchy demographic in Culture Amp.

Confirm your Path

  • Existing Hierarchy: If you have already validated your hierarchy in the past, the Workday integration will update it automatically as long as you have set up your Workday field mapping to point to the exact demographic title currently used for your hierarchy.

  • New Hierarchy: If you have never validated a hierarchy in Culture Amp before, we recommend completing your first Workday sync, then follow the manual validation process outlined in our Add Your Hierarchy guide.

Identify or Prepare your Hierarchy Demographic

The steps below ensure your Workday data correctly targets the hierarchy anchor in Culture Amp.

For customers with an existing hierarchy:

Before your first sync, verify the exact demographic title Culture Amp uses to build your organizational tree:

  • Navigate to Settings > Employee Data > Demographics.

  • Look for the hierarchy icon and note the title exactly as it appears (e.g., "Manager Email").

  • Important: Your Workday mapping must match this title verbatim. Because Workday adds underscores (e.g., Manager_Email), you must have Support map this to your clean title (e.g., Manager Email) before your first sync. If the titles do not match exactly, the hierarchy will not update.

For customers setting up hierarchy for the first time:

  • Decide on your hierarchy anchor (Manager Email is recommended).

  • Ensure this field is included in your Workday report and mapped by Support during Step 4.

  • Once your first sync is successful, you will then proceed to our Add Your Hierarchy guide to perform the one-time validation.

Hierarchy Requirements & Gotchas

To ensure your hierarchy syncs correctly, adhere to the following logic:

  • Identifier Type: Use Manager Email (recommended) or Manager ID. You cannot validate or sync a hierarchy based on Manager Name.

  • Data Inclusion: Ensure all managers are included in your Workday RaaS report. If a manager is missing from the sync file, their direct reports cannot be correctly placed in the hierarchy.

  • Top Leader: Leave the Manager Email field blank for the leader of your organization to establish the top of the tree.

Refer to the Add Your Hierarchy article for full guidance.

Troubleshooting/FAQs


General Data Integrity & Import Management

The first step when investigating any data issue is to check the Import Summary Screen for your most recent import.

  1. Go to Settings > Employee Data > Import History.

  2. Select your most recent import to view details.

This screen provides information on the state of your integration, any specific errors, or will prompt you to run a manual sync to identify problems.

Common Workday Integration Errors

Error Message

Potential Cause

Suggested Fix

Invalid credentials

The Username, Password, or Report URL provided in Culture Amp does not match on Workday.

Verify that the Integration System User (ISU) credentials are correct and the Report URL is the JSON endpoint from Workday.

Re-hired employees are missing or inactive

The sync detects a historical End Date that is more recent than the new Start Date. Since Workday doesn't automatically clear old End Dates, the system assumes the user is still terminated.

Option 1 (Distant Future Dates): Assign a date like 2099-07-09 to re-hires in Workday to force reactivation.

Option 2 (Calculated Field):

  • Create an Evaluate Expression calculated field in Workday: IF Term Date > Most Recent Hire Date, return Term Date; ELSE blank.

  • Add End_Date to the XML override column for the integration to recognize the field.

Expected users are missing from the sync

Workday report filters may be too restrictive.

Check your Workday report filters to ensure you haven't accidentally excluded specific employee groups.

Generic Error / Connection Failed

API Timeout.

Workday may be slow to respond to the request. If validation takes over 60 seconds, refresh your browser and re-input your credentials.

403 Forbidden

The ISU does not have permission to view the report or specific fields within it.

In Workday, ensure the ISU is added to the Report Sharing tab. Also, verify the ISU has "View" access in the Domain Security Policies for all fields in the report.

404 Not Found

The report URL is incorrect, "Web Services" is disabled or the report has been deleted/renamed in Workday.

Double-check the URL in Culture Amp. Ensure "Enable as Web Service" is checked in the Workday Report Definition.

Blank values or missing demographics

The ISU lacks permission to view specific domains or calculated field dependencies.

Domain Access: Ensure the ISU has "View" access to the relevant domains (e.g., 'Worker' object).

Calculated Fields: If using calculated fields, the ISU needs permission for every underlying field used in the logic. (See Proxy Testing below).

Start Date or Date or Birth not syncing

Culture Amp expects specific naming conventions for these demographics, and they may be titled differently on Workday.

Ensure you've named these core demographics Start_Date and Birth_Date on the Workday report. Use XML Override to retitle if needed.

Unexpected underscores in titles

Workday converts spaces to underscores (e.g., Job_Title) by default.

This is expected behavior for Workday. Contact Culture Amp Support to apply Workday field mapping to convert these back to spaces.

How to Troubleshoot Missing Data (Proxy Testing)

If your sync is successful but specific data is missing, you likely have a permissions gap. Workday often returns a blank value rather than an error message when permissions are missing.

What to Check:

  • Domain Access: Ensure the ISU has permission to view the relevant security domains for the Business Object (e.g., the ‘Worker’ object).

  • Calculated Field Dependencies: If using calculated fields, the ISU must have permission to view every underlying field used in the logic/conditions.

To see exactly what Culture Amp "sees," view the report results as the ISU:

  1. Login as the ISU: Use the Integration User’s credentials to log in to Workday.

  2. Download JSON: Download the .json report while logged in as that user.

    • Note: If you don't know the ISU password, perform this in your Sandbox environment first so you can reset the password without breaking the production sync.

  3. Verify Data: If the JSON file is missing values that you can see under your own admin profile, you have a permissions gap.

    • Reminder: If you reset the ISU password in Production, you must update the credentials in the Culture Amp Data Integrations page immediately.

Integration Permissions in Workday (Domain Security)

Switching From CSV or Other Imports

If you are moving from CSV uploads or a different integration, keep the following in mind:

  • Demographic Consistency: When mapping fields, you must map the data to the exact same demographic field you used historically (e.g., mapping to "TEAM" is different from mapping to "TEAM NAME"). Using an incorrect or slightly different title risks discontinuity in your trended survey results.

  • Recommended Action: To avoid confusion, we recommend navigating to Settings > Employee Data Demographics and deleting the old, unused demographics after your first successful sync. (This won't impact any previous survey results.)

Handling Duplicate Employees

Culture Amp uses two fields as unique identifiers for user profiles: Email and Employee ID.

  • As long as at least one of these remains consistent between Workday and Culture Amp, the sync will successfully update the existing profile rather than creating a new one.

  • Duplicate Risk: If you change both the Email and the Employee ID simultaneously in Workday, the sync will not find a match and will create a duplicate profile.

If you see a duplicate profile error flag during your import, take the following steps:

Scenario

Action to Take

A. Before Changes Are Applied

During the first sync review screen, stop the sync. Update the employee emails in Culture Amp to match those in Workday.

  1. Go to the Culture Amp Users page,

  2. Click on the name of the employee you want to update.

  3. Update their email.

  4. Click Save and Exit to update.

  5. Repeat for all duplicated employees.

  6. Then, retry the integration sync.

B. After Changes Are Applied

To clean up the duplicated profiles:

  1. Go to the Culture Amp Users page,

  2. Locate the newest duplicate profile for that user. Click on the name to open up their profile.

  3. Remove existing Email/Employee ID and assign a fake Email or Employee ID to the user and save.

  4. Deactivate this updated profile.

  5. Update the original user profile to match emails in Workday. This keeps the history on the existing employee record.

Further Guidance

Check out our dedicated support guide for further information on duplicate employee clean-up.

Sync Blocked to Protect Employee Privacy

Your automated daily sync might be blocked if Culture Amp detects a high-risk change for an employee. You will receive an email notification if this occurs.

  • When It Happens: The sync is blocked if a combination of an employee's Name, Date of Birth, or Email is changed simultaneously.

  • Purpose: This prevents one employee from accidentally getting access to another employee's private information (like performance reviews).

  • Fix: If you've intentionally changed the employee's details, you can run a manual sync to push the change through. Go to Settings > Employee Data > Users, click Import data, and select Sync. Culture Amp will guide you through the rest.


💬 Need help? Just reply with "Ask a Person" in a Support Conversation to speak with a Product Support Specialist.

Did this answer your question?