Configure SSO Access to the Bank Connect Dashboard

Permissions Required: Workday Security Administrator

To manage Integration Systems and Security Groups configurations, you'll need to be a member of the Security Administrator, Integration Administrator, and/or Implementers security group.

The naming conventions outlined below are for consistency and clarity, you may follow your own naming conventions as needed.

  1. Using the Workday search bar, navigate to the Create SAML SSO Link task.

Search Create SSO.png

  1. Create a link named SSO_Bank Connect with Link Attributes according to the table below.

Create SAML SSO.png

You will receive your [company] (aka "URL slug"), [com_identifier]  ("Company ID"), and [KEY-KEY-KEY-KEY] ("Activation Key") from your account team.

Link Attribute
Value
SAML Version2.0
Assertion Consumer Service URLhttps://[company].wd.koxa.io/api/sso
Name IdentifierWorkday Identifier
Recipienthttps://[company].wd.koxa.io
Audience[company]
Destination URIhttps://[company].wd.koxa.io
Deeplinkhttps://[company].wd.koxa.io
Issuer IDWorkday
Signature MethodSHA 256
Message SigningAssertion Only
x509 Private Key PairPKP_BankConnect (follow the steps below to create)

 

  1. Add two custom attributes, name them CompanyID and ActivationKey.

CompanyID[com_identifier]
ActivationKey[KEY-KEY-KEY-KEY]

 

Create x509 Private Key Pair

  1. Navigate to the x509 Private Key Pair task from the dropdown in the Create SAML SSO Link task. Create a key pair named PKP_BankConnect, click OK.

  •  
    • This should populate the x509 Private Key Pair attribute automatically, if not you can select it from the dropdown.

Create x509 PKP.png

Record your Public Key

  1. After saving the Bank Connect Link, use the PKP_BankConnect related actions menu to navigate to the View Key Pair task.

Related Actions View PKP.png

  1. Copy the Public Key value. This certificate will be shared securely as part of your initial set-up.

View Private Key Pair.png

Please make note of the Public Key. Include the -----BEGIN CERTIFICATE----- and-----END CERTIFICATE-----portions to ensure the complete certificate is shared.