Set Up Workday SSO
What Workday SSO does for OfficeConnect
With SSO enabled, users sign in to Workday OfficeConnect using their existing Workday credentials through your identity provider. They don’t need a separate Adaptive Planning username and password.
For identity-provider-specific guides, see SSO with Okta, SSO with Microsoft Entra ID, or SSO with Ping Identity (coming soon under Admin → Configure).
Prerequisites
- Workday Security Administrator role
Steps
In Workday, create an API client specifically for OfficeConnect. This produces:
- Client ID
- Authorization Endpoint URL
- API Endpoint URL
Record all three — users and IT will need them when configuring tenants. These are the same values referenced in Sign In & Create a Tenant.
If your users are automatically signed in by your identity provider, enable the Show tenant selector at sign-in option in OfficeConnect user settings. This prompts users to select their tenant when signing in, which is useful when:
- Multiple tenants are configured for SSO
- Your identity provider auto-signs users in
- Users work with both Financials and Adaptive Planning data sources
Result
Users can sign in to Workday OfficeConnect using their Workday credentials. They’ll see the Workday sign-in page when they click Log In in the OfficeConnect tab.
Next steps
- Deploy Tenants via Registry to push tenant configuration to user machines automatically.
- Authentication Token Errors if users hit sign-in problems.
- Secure OfficeConnect Workbooks to harden saved files.