Identity Federation via Bank Connect
Your Bank Connect user provides lightweight identity federation between your Workday user identity and your bank user identity. This enables two primary functionalities:
-
From a user perspective, you can operate across native Workday and Bank Connect extended user experiences without needing to re-login each time — a single sign-on experience.
- Once you have activated your Bank Connect user and your admin has linked you, you won't need to separately sign into Bank Connect.
-
From an internal controls perspective, your individual banking entitlements will be enforced.
- You will only be able to approve payments from the accounts and payments types you're entitled to, and only for the amounts designated.
- Entitlements may vary across your company from user-to-user. So, someone else may have access to different accounts, payment types, and approvals for different amounts.
Authorizing: Access vs. Sensitive Actions
Authorized users — usually payment approvers and admins — access the Bank Connect dashboard from Workday via SSO link.
Payment approvers will have access to the Approvals and Activity tabs in the dashboard. Admins will also have access to the Admin tab.
Both users may start actions — approving payments, or linking user and accounts — however saving those sensitive actions will prompt step-up authentication.
Entitlements
Bank Connect delivers a fine-grained entitlements engine. What is offered is similar in functionality to your bank's online banking portal, but embedded in your ERP workflow. These entitlements enforce access, payment limits, and drive workflows in the user experience at the company-level and at the user-level.
Your entitlements are defined during the enrollment stage with your bank or Koxa. So, contact your account team to make changes.
Understanding your entitlements may help you define your desired workflows and troubleshoot any issues.