Set Up Workday SSO

Configure OfficeConnect to use Workday Single Sign-On for your organization.
🔧 IT Admin This page requires Workday Security Administrator access. End users don’t need to do anything — SSO is configured at the tenant level by admins.

What Workday SSO does for OfficeConnect

With SSO enabled, users sign in to OfficeConnect using their existing Workday credentials through your identity provider. They don’t need a separate Adaptive Planning username and password.

Prerequisites

  • Workday Security Administrator role

Steps

1
Enable OfficeConnect in Workday In Workday, run the Enable Features After User Sync task and enable the OfficeConnect feature for your tenant.
2
Generate the OfficeConnect API client

In Workday, create an API client specifically for OfficeConnect. This produces:

  • Client ID
  • Authorization Endpoint URL
  • API Endpoint URL

Record all three — users and IT will need them when configuring tenants.

3
Assign the Access OfficeConnect permission In Workday, ensure users who need OfficeConnect access have the Access OfficeConnect permission in their security permission set.
4
Configure the Connection user setting (optional)

If your users are automatically signed in by your identity provider, enable the Show tenant selector at sign-in option in OfficeConnect user settings. This prompts users to select their tenant when signing in, which is useful when:

  • Multiple tenants are configured for SSO
  • Your identity provider auto-signs users in
  • Users work with both Financials and Adaptive Planning data sources

Result

Users can sign in to OfficeConnect using their Workday credentials. They’ll see the Workday sign-in page when they click Log In in the OfficeConnect tab.

Next steps

→ Deploy Tenants via Registry to push tenant configuration to user machines automatically