Say good-bye to custom scripts and simplify your workforce identity lifecycle with Workday and Azure

Published Jan 23 2019 09:00 AM 33.1K Views

Howdy folks,

 

As more and more enterprises move to Cloud Human Capital Management (HCM) solutions, we see an increasing demand for Azure Active Directory (Azure AD) integrations that tap identity at the source where it first gets created. You’ve told us how enabling such integrations can create transformational ways of managing your workforce. Today, I’m excited to announce that automated inbound user provisioning from Workday to on-premises Active Directory and Azure AD is now Generally Available!

 

With pre-built cloud-based integration of Azure AD with the Workday HCM suite, you can now:

 

  • Securely tap into the rich workforce identity and organization data present in Workday.
  • Implement end-to-end identity lifecycle management covering the entire spectrum of Joiner-Mover-Leaver scenarios using Workday as the “system of record.”
  • Eliminate old school approaches of using flat files or custom scripts to sync employee data.

 

Embracing HR-centric approach to provisioning

 

The Workday to Azure AD inbound user provisioning solution is designed to work for both hybrid and cloud-first companies looking to automate the provisioning and deprovisioning of users from Workday HCM to on-premises Active Directory and Azure AD.

 

When workforce profiles change in Workday— a name change, title change, manager change, or termination—those changes are detected by the cloud-based Azure AD user provisioning service and synchronized to the downstream systems and applications.

 

Workday and Azure AD integration 1.png

Since we released the first public preview of this solution, many customers have already successfully adopted and deployed it live in their organizations. The Azure AD provisioning service now manages 10.8 million identities and we are thrilled to see customers realizing the unique automation and compliance benefits that our cloud managed provisioning service offers.

 

Here is what Mikkel Heiberg, Principal Cloud Architect, at Nilfisk, one of our Danish manufacturing customers, had to say about the solution:

 

“The Azure AD and Workday integration delivers a solid foundation for automating employee identity life cycle management with direct traceability to Workday HR events. It has accelerated our employee onboarding and off boarding process workflows and eliminated a lot of recurrent tasks for our IT service center.” 

 

Since the public preview, we added new capabilities to our Workday integration, all based on customer feedback:

 

  • Lightweight Provisioning Agent wizard to manage on-premises Active Directory domains—The new Provisioning Agent with built-in support for high availability and failover allows you to configure user provisioning to multiple on-premises Active Directory domains.

Provisioning Agent Configuration wizard.Provisioning Agent Configuration wizard.

  • Access to more Workday data—You can now provision data from any attribute supported by the Workday Get_Workers operation of the Workday Human Resources API. This includes cost center data, employee categories, custom user IDs, and more. For details, see Customizing the list of Workday user attributes in the tutorial.

Workday to Active Directory attribute mapping.Workday to Active Directory attribute mapping.

  • Automatic unique ID generation and conflict resolution for new users—User Principal Name (UPN) or Common Name (CN) for your new user already exists? No problem! Using the new SelectUniqueValue function, you can now specify fallback logic at the time of user creation for generating non-conflicting values for attributes like CN, samAccountName, and userPrincipalName that have uniqueness constraints.

 

Specify Unique ID Generation rule.Specify Unique ID Generation rule.

  • Advanced provisioning of new hires—A common request to IT from business units is to ensure that a newly-hired employee has all their required user accounts pre-provisioned with the correct level of access, in advanced of their first day of work. The Workday provisioning app now enables you to provision user data as soon as it becomes available in Workday, instead of waiting until the user is set to “Active” in Workday.

The Workday-driven inbound user provisioning feature is available today for all customers using Azure AD Premium P1 and above. You can start using this feature by following our updated Tutorial for Configuring Workday for Inbound User Provisioning. To help you plan your deployment, we have also published a comprehensive deployment guide.

 

Let us know what you think in the comments below. You can also post your feedback or suggestions for new capabilities that you would like to see in our Azure AD UserVoice feedback forum.

And as always, we’d like to say a special thank you to our preview customers and our partners at Workday, who provided great feedback to enhance the integration of Workday HCM with Azure AD and make this feature a reality!

 

Best regards,

Alex Simons (@Alex_A_Simons )

Corporate VP of Program Management

Microsoft Identity Division

34 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-393867%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-393867%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20this%20is%20finally%20out%20of%20Preview%20(we%20don't%20touch%20anything%20preview%2C%20MS%20is%20buggy%20enough%20%3A)%3C%2Fimg%3E%20)%3C%2FP%3E%3CP%3EWe%20are%20looking%20to%20switch%20from%20our%20csv%2Fftp%2Fpowershell%20script%20to%20using%20this%20azureAD%20connection%2C%20exploring%20with%20our%20HR%20team.%3C%2FP%3E%3CP%3EWe%20would%20also%20love%20to%20have%20photo%20sync%20between%20the%20systems%20(bi-directional%2C%20with%20constraints%20on%20size%20because%20of%20app%20limitations)%2C%20would%20be%20a%20great%20productivity%20savings.%3C%2FP%3E%3CP%3EAdding%20of%20groups%20at%20user%20creation%20time%20is%20critical%20and%20would%20make%20creating%20users%20very%20difficult%20if%20this%20wasn't%20possible.%20We%20are%20currently%20creating%20users%20with%20templates%20in%20ManageEngine%20ADManager%2C%20they%20have%20some%20integrations%20also%20with%20WD%20but%20not%20sure%20how%20well%20those%20work%20vs%20using%20AAD.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-390462%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-390462%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20team%2C%20I%20have%20a%20number%20of%20customers%20who%20use%20SAP%20for%20their%20HR%20and%20it'd%20be%20great%20to%20know%20if%20SAP%20integration%20comparable%20to%20this%20is%20planned.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ethanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-388438%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-388438%22%20slang%3D%22en-US%22%3E%3CP%3EApologies%20for%20the%20delay%20in%20getting%20back.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F293618%22%20target%3D%22_blank%22%3E%40David_Hill%3C%2FA%3E%26nbsp%3BAutomatic%20group%20assignment%20is%20on%20the%20roadmap%2C%20but%20we%20don't%20have%20a%20timeline%20on%20it%20yet.%20I%20have%20also%20added%20it%20to%20our%20%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Fsuggestions%2F37199011-workday-driven-automatic-ad-group-assignment%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EUserVoice%20feedback%20forum%3C%2FA%3E%20to%20track%20the%20feedback%20around%20it.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F293784%22%20target%3D%22_blank%22%3E%40Cart3r90%3C%2FA%3E%26nbsp%3BYes%2C%20the%20solution%20supports%20creating%20users%20in%20different%20domains%20and%20also%20within%20a%20specific%20OU%20based%20on%20Workday%20Location%20attribute.%20For%20multiple%20domains%20refer%20to%20the%20tutorial%20section%20on%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fsaas-apps%2Fworkday-inbound-tutorial%23integrating-with-multiple-active-directory-domains%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Eintegrating%20multiple%20Active%20Directory%20domains%3C%2FA%3E%20and%20for%20OU%20routing%20use%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fsaas-apps%2Fworkday-inbound-tutorial%23below-are-some-example-attribute-mappings-between-workday-and-active-directory-with-some-common-expressions%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EparentDistinguishedName%20attribute%20along%20with%20the%20Switch%20expression%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-359053%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-359053%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F182937%22%20target%3D%22_blank%22%3E%40Chetan%20Desai%3C%2FA%3E%2C%3CBR%20%2F%3EIn%20regards%20to%20the%20provisioning%20of%20AD%20user%20objects%2C%20does%20this%20support%20creating%20users%20in%20different%20domains%20within%20the%20forest%20and%20further%20more%20creating%20them%20in%20specific%20OUs%20based%20on%20say%20a%20specific%20value%20such%20as%20'Location'.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-358888%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-358888%22%20slang%3D%22en-US%22%3E%3CP%3EAccording%20to%20the%20FAQ%20section%20of%20the%20Tutorial%2C%20assigning%20users%20to%20groups%20is%20not%20yet%20supported.%26nbsp%3B%20Is%20automatic%20group%20assignment%20on%20the%20roadmap%3F%26nbsp%3B%20If%20it%20is%20on%20the%20roadmap%2C%20any%20clear%20timeline%20to%20when%20this%20feature%20may%20be%20available%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357938%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357938%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F350%22%20target%3D%22_blank%22%3E%40Steve%20Elliott%3C%2FA%3E%2C%20perhaps%20if%20your%20AAD%20tenant%20is%20in%20hybrid%20mode%2C%20then%20you%20don't%20have%20such%20options%20as%20all%20accounts%20supposed%20to%20be%20provisioned%20to%20internal%20AD%20and%20then%20synced%20to%20AAD.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357934%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357934%22%20slang%3D%22en-US%22%3E%3CP%3EWithin%20the%20current%20provisioning%20agent%2C%20is%20it%20able%20to%20cope%20with%20various%20scenarios%20depending%20on%20the%20type%20of%20user%20being%20onboarded.%20For%20example%2C%20if%20a%20user%20is%20a%20frontline%20worker%20(maybe%20defined%20by%20a%20certain%20job%20role)%20to%20provision%20the%20user%20into%20Azure%20directly%20as%20a%20cloud%20only%20user%2C%20and%20if%20an%20enterprise%20worker%2C%20to%20then%20provision%20the%20account%20in%20local%20AD%20which%20then%20syncs%20up%20to%20365%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOr%20would%20it%20be%20a%20case%20of%20all%20users%20in%20scope%20for%20a%20particular%20domain%20are%20sent%20to%20either%20Azure%20as%20all%20cloud%20only%20or%20all%20users%20send%20to%20local%20AD%20(which%20would%20then%20sync%20to%20the%20cloud%20via%20ADC)%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-352782%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-352782%22%20slang%3D%22en-US%22%3EThanks%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F182937%22%20target%3D%22_blank%22%3E%40Chetan%20Desai%3C%2FA%3E%2C%20this%20is%20what%20I%20expected.%20So%2C%20from%20my%20understanding%2C%20it%E2%80%99s%20probably%20make%20sense%20to%20generate%20UPN%2Femail%20for%20employees%20in%20the%20Workday%20in%20our%20use%20case%20as%20it%20keeps%20all%20records%20even%20for%20off%20boarded%20accounts%2C%20and%20then%20provisione%20new%20accounts%20to%20AD%2FAAD.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-352358%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-352358%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15060%22%20target%3D%22_blank%22%3E%40Alexey%20Goncharov%3C%2FA%3E%20Yes%2C%20you%20are%20right.%20If%20your%20off-boarding%20process%20simply%20disables%20the%20account%20in%20AD%2FAzure%20AD%2C%20then%20you%20can%20use%20the%20SelectUniqueValue%20function%20to%20ensure%20unique%20email%2FUPN%20value.%20If%20your%20off-boarding%20process%20removes%20or%20hard-deletes%20a%20user%20in%20AD%2FAzure%20AD%2C%20then%20you%20will%20have%20to%20rely%20on%20an%20external%20store%20or%20database%20to%20store%20UPN%2Femail%20values%20that%20cannot%20be%20re-used.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-332594%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-332594%22%20slang%3D%22en-US%22%3EThanks%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F182937%22%20target%3D%22_blank%22%3E%40Chetan%20Desai%3C%2FA%3E%20From%20my%20understanding%2C%20as%20long%20as%20AD%2FAAD%20doesn't%20keep%20a%20history%20for%20off-boarded%20employee%20accounts%2C%20we%20either%20need%20to%20rely%20on%20data%20stored%20somewhere%20else%2C%20in%20our%20case%20it's%20the%20Workday%2C%20in%20order%20to%20make%20sure%20that%20previously%20used%20email%2FUPN%20is%20not%20assigned%20to%20a%20newly%20on-boarded%20employee%20or%20keep%20disabled%20AD%2FAAD%20accounts%20to%20ensure%20unique%20email%2FUPN%20value%20for%20third-party%20apps%20which%20use%20it%20either%20as%20a%20login%20or%2Fand%20notification%20and%20workflow%20purposes%2C%20isn't%20it%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-326975%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-326975%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15060%22%20target%3D%22_blank%22%3E%40Alexey%20Goncharov%3C%2FA%3E%26nbsp%3B-%20regarding%20your%20question%20about%20acceptable%20unique%20account%20identifiers%20in%20target%20apps%2C%20Azure%20AD%20provides%20two%20mechanisms%20to%20deal%20with%20this%20requirement%3A%26nbsp%3B%3C%2FP%3E%0A%3CP%3E1)%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fmanage-apps%2Ffunctions-for-customizing-application-data%23selectuniquevalue%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3ESelectUniqueValue%20function%3C%2FA%3E%20-%20You%20can%20use%20this%20function%20to%20define%20prevent%20duplicates%20and%20specify%20fallback%20logic%20for%20acceptable%20unique%20account%20identifiers.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E2)%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fmanage-apps%2Fcustomize-application-attributes%23understanding-attribute-mapping-properties%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EMatching%20precedence%20rules%3C%2FA%3E%20-%20At%20the%20time%20of%20mapping%2C%20you%20can%20specify%20matching%20attributes%20and%20set%20the%20order%20for%20matching%20precedence.%20Matching%20rules%20are%20evaluated%20in%20order%20and%20as%20soon%20as%20a%20match%20is%20found%20no%20further%20rules%20are%20evaluated.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-326963%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-326963%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F272406%22%20target%3D%22_blank%22%3E%40jbush82%3C%2FA%3E%26nbsp%3B%2C%20currently%20the%20provisioning%20agent%20is%20designed%20to%20work%20with%20the%20Azure%20AD%20provisioning%20service%20and%20it%20uses%20the%20SCIM%20protocol.%20We%20plan%20to%20use%20the%20same%20provisioning%20agent%20for%20inbound%20integration%20with%20other%20HRIS%20systems.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-326960%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-326960%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F44171%22%20target%3D%22_blank%22%3E%40Michael%20%C3%96berg%3C%2FA%3E%2C%26nbsp%3Bthank%20you%20for%20the%20suggestion!%20I%20have%20added%20it%20to%20our%20%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Fsuggestions%2F36656062-support-inbound-provisioning-from-talentsoft-to-az%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EUserVoice%20feedback%20forum%3C%2FA%3E%20to%20track%20it.%20Feel%20free%20to%20socialize%20it%20and%20request%20TalentSoft%20customers%20to%20up%20vote%20the%20idea.%26nbsp%3B%20%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325994%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325994%22%20slang%3D%22en-US%22%3ESome%203-party%20SaaS%20apps%20are%20using%20email%2FUPN%20as%20unique%20account%20identifier%20and%20don't%20allow%20to%20use%20the%20same%20account%20name%20identifier%20even%20if%20employee%20with%20similar%20UPN%2Femail%20doesn't%20exist%20in%20AD%2FAAD%20as%20those%20apps%20keep%20history%20much%20longer%20that%20we%20do%20in%20AD%2FAAD.%20I'm%20curious%20how%20other%20companies%20are%20handing%20that%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325972%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325972%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20intention%20to%20release%20the%20%22Lightweight%20Provisioning%20Agent%22%20as%20a%20connector%20so%20we%20can%20create%20AD%20accounts%20from%20AAD%2C%20but%20driven%20by%20something%20else%20other%20than%20Workday%20or%20some%20other%20HRIS%20solution%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325453%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325453%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F182937%22%20target%3D%22_blank%22%3E%40Chetan%20Desai%3C%2FA%3EAny%20plans%20to%20integrate%20with%20Talentsoft%3F%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.talentsoft.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.talentsoft.com%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324760%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324760%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F5279%22%20target%3D%22_blank%22%3E%40Wouter%20Goderis%3C%2FA%3E%26nbsp%3B%2C%20yes%2C%20we%20have%20plans%20to%20support%20SuccessFactors.%20Stay%20tuned%20for%20updates%20on%20that%20front!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324531%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324531%22%20slang%3D%22en-US%22%3E%3CP%3Eany%20plans%20to%20support%20employeecenter%20(succesfactors)%20in%20a%20similar%20way%20%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324519%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324519%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3161%22%20target%3D%22_blank%22%3E%40James%20Malone%3C%2FA%3E%2C%20Looks%20like%20the%20doc%20set%20change%20took%20some%20time%20to%20propagate.%20Please%20check%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fsaas-apps%2Fworkday-inbound-tutorial%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Etutorial%20link%3C%2FA%3E%20again%20and%20you%20can%20see%20updates%20to%20our%20documentation.%20We%20have%20included%20a%20new%20FAQ%20and%20Troubleshooting%20section%20in%20the%20tutorial.%20Regarding%20your%20specific%20question%20on%20thumbNailPhoto%20attribute%2C%20it%20is%20not%20supported%20in%20the%20current%20release.%20We%20have%20seen%20multiple%20requests%20for%20supporting%20binary%20attributes%20and%20it%20is%20in%20our%20backlog.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EThank%20you%20for%20sharing%20your%20feedback.%20We%20welcome%20all%20feedback%20and%20encourage%20you%20to%20submit%20your%20idea%20or%20improvement%20suggestion%20in%20the%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%22%20data-linktype%3D%22external%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Efeedback%20forum%20of%20Azure%20AD%3C%2FA%3E%3CSPAN%3E.%20For%20specific%20feedback%20related%20to%20the%20Workday%20integration%2C%20select%20the%20category%26nbsp%3B%3C%2FSPAN%3E%3CEM%3ESaaS%20Applications%3C%2FEM%3E%3CSPAN%3E%26nbsp%3Band%20search%20using%20the%20keywords%26nbsp%3B%3C%2FSPAN%3E%3CEM%3EWorkday%3C%2FEM%3E%3CSPAN%3E%26nbsp%3Bto%20find%20existing%20feedback%20related%20to%20the%20Workday.%20You%20can%20also%20up%20vote%20existing%20feature%20suggestions%20and%20demonstrate%20support%20for%20it%20by%20leaving%20your%20comments.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324507%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324507%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15060%22%20target%3D%22_blank%22%3E%40Alexey%20Goncharov%3C%2FA%3E%26nbsp%3B%2C%20I'm%20part%20of%20PM%20team%20working%20on%20Cloud%20HCM%20integrations.%26nbsp%3BThanks%20for%20sharing%20your%20question%20here.%20I'd%20like%20to%20further%20understand%20your%20use-case%20to%20provide%20the%20right%20guidance.%20It%20will%20be%20great%20if%20you%20can%20send%20an%20email%20with%20your%20use-case%20details%20to%26nbsp%3BAADWDProvFeedback%40microsoft.com%20and%20we%20can%20work%20on%20it.%20I'll%20then%20update%20the%20thread%20here%20to%20close%20the%20loop.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324501%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324501%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20tutorial%20publication%20was%20last%20updated%26nbsp%3B06%2F17%2F2018.%20Was%20there%20any%20improvement%20made%20in%20synchronizing%26nbsp%3Bthe%20thumbnailPhoto%20user%20attribute%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324460%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324460%22%20slang%3D%22en-US%22%3EI'm%20curious%2C%20how%20other%20folks%20are%20managing%20contract%20termination%20of%20off-boarded%20user%20accounts%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-509570%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-509570%22%20slang%3D%22en-US%22%3E%3CP%3EChetan...do%20we%20have%20timeframe%20on%20when%20similar%20capability%20will%20be%20available%20for%20SuccessFactors.%20Is%20it%20in%20planning%20or%20development%20stage%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-526338%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-526338%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F313426%22%20target%3D%22_blank%22%3E%40freds123%3C%2FA%3E%20Thank%20you%20for%20your%20feedback.%20Both%20photo%20sync%20and%20group%20membership%20provisioning%20are%20part%20of%20our%20backlog.%20As%20we%20spec%20the%20support%20for%20these%20two%20features%2C%20I%20would%20like%20to%20validate%20details%20such%20as%20photo%20format%20support%2C%20size%20restrictions%2C%20group%20templates%2C%20etc.%20with%20you.%20Feel%20free%20to%20send%20me%20a%20direct%20message%20and%20we%20can%20go%20over%20it.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F331276%22%20target%3D%22_blank%22%3E%40TM-01%3C%2FA%3E%20SAP%20SuccessFactors%20integration%20is%20in%20advanced%20stages%20of%20planning%20where%20we%20are%20reviewing%20the%20integration%20spec%20and%20scope%20of%20the%20first%20relase%20with%20customers.%20Can%20you%20send%20me%20a%20direct%20message%20and%20I%20can%20loop%20you%20into%20this%20review%20process%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-538883%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-538883%22%20slang%3D%22en-US%22%3E%3CP%3EWhere%20is%20Dynamics%20365%20for%20Talent%20on%20the%20roadmap%20for%20an%20AD%20user%20provisioning%20solution%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-668515%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-668515%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F336273%22%20target%3D%22_blank%22%3E%40DarrylJ%3C%2FA%3E%26nbsp%3BI%20have%20a%20similar%20request%2C%20so%20I%20posted%20a%20suggestion%20to%20their%20suggestion%20forum.%26nbsp%3B%20Here%20is%20the%20link%20so%20you%20can%20upvote%20if%20desired%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Fsuggestions%2F37825696-inbound-provisioning-talent%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Fsuggestions%2F37825696-inbound-provisioning-talent%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1321794%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1321794%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%20I%20am%20in%20the%20middle%20of%20Workday%20implementation%2C%20would%20like%20to%20know%20how%20the%20new%20joiner%20and%20the%20hiring%20team%20receive%20the%20login%20and%20password%20after%20the%20AD%20account%20is%20created.%20Appreciated%20for%20the%20reply.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1325237%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1325237%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F629411%22%20target%3D%22_blank%22%3E%40pollyli%3C%2FA%3E%26nbsp%3BThanks%20for%20reaching%20out.%20The%20integration%20does%20not%20support%20the%20feature%20of%20credential%20delivery%20after%20AD%20account%20creation.%20Please%20upvote%20the%20request%20for%20this%20feature%20%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Fsuggestions%2F36687964-workday-inbound-provisioning-to-ad-allow-passwor%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehere%3C%2FA%3E.%20An%20option%20you%20may%20consider%3A%20Run%20a%20PowerShell%20script%20to%20query%20for%20new%20users%20created%2C%20reset%20the%20password%20and%20send%20email%20to%20hiring%20team.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320540%22%20slang%3D%22en-US%22%3ESay%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20Azure%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320540%22%20slang%3D%22en-US%22%3E%3CP%3EHowdy%20folks%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20more%20and%20more%20enterprises%20move%20to%20Cloud%20Human%20Capital%20Management%20(HCM)%20solutions%2C%20we%20see%20an%20increasing%20demand%20for%20Azure%20Active%20Directory%20(Azure%20AD)%20integrations%20that%20tap%20identity%20at%20the%20source%20where%20it%20first%20gets%20created.%20You%E2%80%99ve%20told%20us%20how%20enabling%20such%20integrations%20can%20create%20transformational%20ways%20of%20managing%20your%20workforce.%20Today%2C%20I%E2%80%99m%20excited%20to%20announce%20that%20automated%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fsaas-apps%2Fworkday-inbound-tutorial%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Einbound%20user%20provisioning%20from%20Workday%20to%20on-premises%20Active%20Directory%20and%20Azure%20AD%3C%2FA%3E%3C%2FSPAN%3E%20is%20now%20Generally%20Available!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWith%20pre-built%20cloud-based%20integration%20of%20Azure%20AD%20with%20the%20Workday%20HCM%20suite%2C%20you%20can%20now%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ESecurely%20tap%20into%20the%20rich%20workforce%20identity%20and%20organization%20data%20present%20in%20Workday.%3C%2FLI%3E%0A%3CLI%3EImplement%20end-to-end%20identity%20lifecycle%20management%20covering%20the%20entire%20spectrum%20of%20Joiner-Mover-Leaver%20scenarios%20using%20Workday%20as%20the%20%E2%80%9Csystem%20of%20record.%E2%80%9D%3C%2FLI%3E%0A%3CLI%3EEliminate%20old%20school%20approaches%20of%20using%20flat%20files%20or%20custom%20scripts%20to%20sync%20employee%20data.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%20id%3D%22toc-hId-1702021361%22%3EEmbracing%20HR-centric%20approach%20to%20provisioning%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20Workday%20to%20Azure%20AD%20inbound%20user%20provisioning%20solution%20is%20designed%20to%20work%20for%20both%20hybrid%20and%20cloud-first%20companies%20looking%20to%20automate%20the%20provisioning%20and%20deprovisioning%20of%20users%20from%20Workday%20HCM%20to%20on-premises%20Active%20Directory%20and%20Azure%20AD.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhen%20workforce%20profiles%20change%20in%20Workday%E2%80%94%20a%20name%20change%2C%20title%20change%2C%20manager%20change%2C%20or%20termination%E2%80%94those%20changes%20are%20detected%20by%20the%20cloud-based%20Azure%20AD%20user%20provisioning%20service%20and%20synchronized%20to%20the%20downstream%20systems%20and%20applications.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Workday%20and%20Azure%20AD%20integration%201.png%22%20style%3D%22width%3A%20956px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F68970i198EEDA7F96CB582%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Workday%20and%20Azure%20AD%20integration%201.png%22%20alt%3D%22Workday%20and%20Azure%20AD%20integration%201.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3ESince%20we%20released%20the%20first%20public%20preview%20of%20this%20solution%2C%20many%20customers%20have%20already%20successfully%20adopted%20and%20deployed%20it%20live%20in%20their%20organizations.%20The%20Azure%20AD%20provisioning%20service%20now%20manages%2010.8%20million%20identities%20and%20we%20are%20thrilled%20to%20see%20customers%20realizing%20the%20unique%20automation%20and%20compliance%20benefits%20that%20our%20cloud%20managed%20provisioning%20service%20offers.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHere%20is%20what%20Mikkel%20Heiberg%2C%20Principal%20Cloud%20Architect%2C%20at%20Nilfisk%2C%20one%20of%20our%20Danish%20manufacturing%20customers%2C%20had%20to%20say%20about%20the%20solution%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3E%E2%80%9CThe%20Azure%20AD%20and%20Workday%20integration%20delivers%20a%20solid%20foundation%20for%20automating%20employee%20identity%20life%20cycle%20management%20with%20direct%20traceability%20to%20Workday%20HR%20events.%20It%20has%20accelerated%20our%20employee%20onboarding%20and%20off%20boarding%20process%20workflows%20and%20eliminated%20a%20lot%20of%20recurrent%20tasks%20for%20our%20IT%20service%20center.%E2%80%9D%26nbsp%3B%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESince%20the%20public%20preview%2C%20we%20added%20new%20capabilities%20to%20our%20Workday%20integration%2C%20all%20based%20on%20customer%20feedback%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSTRONG%3ELightweight%20Provisioning%20Agent%20wizard%20to%20manage%20on-premises%20Active%20Directory%20domains%3C%2FSTRONG%3E%E2%80%94The%20new%20Provisioning%20Agent%20with%20built-in%20support%20for%20high%20availability%20and%20failover%20allows%20you%20to%20configure%20user%20provisioning%20to%20multiple%20on-premises%20Active%20Directory%20domains.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Provisioning%20Agent%20Configuration%20wizard.%22%20style%3D%22width%3A%20869px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F68971i61D347F82FBA0454%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Workday%20and%20Azure%20AD%20integration%202.png%22%20alt%3D%22Provisioning%20Agent%20Configuration%20wizard.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EProvisioning%20Agent%20Configuration%20wizard.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSTRONG%3EAccess%20to%20more%20Workday%20data%3C%2FSTRONG%3E%E2%80%94You%20can%20now%20provision%20data%20from%20%3CEM%3Eany%20attribute%3C%2FEM%3E%20supported%20by%20the%20Workday%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fcommunity.workday.com%2Fsites%2Fdefault%2Ffiles%2Ffile-hosting%2Fproductionapi%2FHuman_Resources%2Fv21.1%2FGet_Workers.html%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EGet_Workers%3C%2FA%3E%3C%2FSPAN%3E%20operation%20of%20the%20Workday%20Human%20Resources%20API.%20This%20includes%20cost%20center%20data%2C%20employee%20categories%2C%20custom%20user%20IDs%2C%20and%20more.%20For%20details%2C%20see%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-saas-workday-inbound-tutorial%23customizing-the-list-of-workday-user-attributes%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECustomizing%20the%20list%20of%20Workday%20user%20attributes%3C%2FA%3E%3C%2FSPAN%3E%20in%20the%20tutorial.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Workday%20to%20Active%20Directory%20attribute%20mapping.%22%20style%3D%22width%3A%20877px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F68972i8F686787106C4D95%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Workday%20and%20Azure%20AD%20integration%203.png%22%20alt%3D%22Workday%20to%20Active%20Directory%20attribute%20mapping.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EWorkday%20to%20Active%20Directory%20attribute%20mapping.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSTRONG%3EAutomatic%20unique%20ID%20generation%20and%20conflict%20resolution%20for%20new%20users%3C%2FSTRONG%3E%E2%80%94User%20Principal%20Name%20(UPN)%20or%20Common%20Name%20(CN)%20for%20your%20new%20user%20already%20exists%3F%20No%20problem!%20Using%20the%20new%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fmanage-apps%2Ffunctions-for-customizing-application-data%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESelectUniqueValue%3C%2FA%3E%3C%2FSPAN%3E%20function%2C%20you%20can%20now%20specify%20fallback%20logic%20at%20the%20time%20of%20user%20creation%20for%20generating%20non-conflicting%20values%20for%20attributes%20like%20CN%2C%20samAccountName%2C%20and%20userPrincipalName%20that%20have%20uniqueness%20constraints.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Specify%20Unique%20ID%20Generation%20rule.%22%20style%3D%22width%3A%20498px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F69073i6102C656285B49BB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Workday%20and%20Azure%20AD%20integration%204%20v2.png%22%20alt%3D%22Specify%20Unique%20ID%20Generation%20rule.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3ESpecify%20Unique%20ID%20Generation%20rule.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSTRONG%3EAdvanced%20provisioning%20of%20new%20hires%3C%2FSTRONG%3E%E2%80%94A%20common%20request%20to%20IT%20from%20business%20units%20is%20to%20ensure%20that%20a%20newly-hired%20employee%20has%20all%20their%20required%20user%20accounts%20pre-provisioned%20with%20the%20correct%20level%20of%20access%2C%20in%20advanced%20of%20their%20first%20day%20of%20work.%20The%20Workday%20provisioning%20app%20now%20enables%20you%20to%20provision%20user%20data%20as%20soon%20as%20it%20becomes%20available%20in%20Workday%2C%20instead%20of%20waiting%20until%20the%20user%20is%20set%20to%20%E2%80%9CActive%E2%80%9D%20in%20Workday.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EThe%20Workday-driven%20inbound%20user%20provisioning%20feature%20is%20available%20today%20for%20all%20customers%20using%20Azure%20AD%20Premium%20P1%20and%20above.%20You%20can%20start%20using%20this%20feature%20by%20following%20our%20updated%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-saas-workday-inbound-tutorial%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ETutorial%20for%20Configuring%20Workday%20for%20Inbound%20User%20Provisioning%3C%2FA%3E%3C%2FSPAN%3E.%20To%20help%20you%20plan%20your%20deployment%2C%20we%20have%20also%20published%20a%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FWorkdayDeploymentPlan%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ecomprehensive%20deployment%20guide%3C%2FA%3E%3C%2FSPAN%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELet%20us%20know%20what%20you%20think%20in%20the%20comments%20below.%20You%20can%20also%20post%20your%20feedback%20or%20suggestions%20for%20new%20capabilities%20that%20you%20would%20like%20to%20see%20in%20our%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Ffilters%2Ftop%3Fcategory_id%3D160599%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EAzure%20AD%20UserVoice%20feedback%20forum%3C%2FA%3E%3C%2FSPAN%3E.%3C%2FP%3E%0A%3CP%3EAnd%20as%20always%2C%20we%E2%80%99d%20like%20to%20say%20a%20special%20thank%20you%20to%20our%20preview%20customers%20and%20our%20partners%20at%20Workday%2C%20who%20provided%20great%20feedback%20to%20enhance%20the%20integration%20of%20Workday%20HCM%20with%20Azure%20AD%20and%20make%20this%20feature%20a%20reality!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3EAlex%20Simons%20(-ERR%3AREF-NOT-FOUND-%3CSPAN%3E%5B%23%24dp92%5D%40Alex_A_Simons%3C%2FSPAN%3E%26nbsp%3B)%3C%2FP%3E%0A%3CP%3ECorporate%20VP%20of%20Program%20Management%3C%2FP%3E%0A%3CP%3EMicrosoft%20Identity%20Division%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-320540%22%20slang%3D%22en-US%22%3E%3CP%3EI%E2%80%99m%20excited%20to%20announce%20that%20automated%20inbound%20user%20provisioning%20from%20Workday%20to%20on-premises%20Active%20Directory%20and%20Azure%20AD%20is%20now%20generally%20available!%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Workday%20and%20Azure%20AD%20integration%201.png%22%20style%3D%22width%3A%20956px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F68969i87B9B5E24BE65AC4%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Workday%20and%20Azure%20AD%20integration%201.png%22%20alt%3D%22Workday%20and%20Azure%20AD%20integration%201.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-320540%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EProduct%20Announcements%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1553055%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1553055%22%20slang%3D%22en-US%22%3E%3CP%3EWhere%20is%20the%26nbsp%3B%3CSTRONG%3EAdvanced%20provisioning%20of%20new%20hires%26nbsp%3B%3C%2FSTRONG%3Eoption%3F%20We%20have%20an%20issue%20where%20the%20integration%20does%20not%20'see'%20a%20new%20hire%20until%20we%20reach%20their%20actual%20start%20date%20in%20Workday.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1553373%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1553373%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F743596%22%20target%3D%22_blank%22%3E%40JeffSalveter-Taylor%3C%2FA%3E%26nbsp%3Bby%20default%2C%20the%20Workday%20provisioning%20app%20retrieves%20new%20hire%20information%20when%20the%20%22New%20Hire%22%20business%20process%20is%20complete%20in%20Workday.%20Please%20check%20with%20your%20Workday%20admin%2C%20to%20see%20if%20the%20new%20hire%20business%20process%20in%20your%20Workday%20tenant%20is%20configured%20to%20complete%20on%20the%20start%20day%20of%20the%20new%20hire.%20If%20the%20issue%20still%20persists%2C%20f%3CSPAN%3Eeel%20free%20to%20send%20me%20a%20direct%20message%20and%20we%20can%20take%20a%20look.%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2056654%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2056654%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20in%20the%20middle%20of%20implementing%20AD%20Azure%20provisioning%20with%20Workday.%20Since%20we%20are%20in%20Canada%2C%20the%20department%20in%20AD%20has%20to%20be%20in%20bilingual%20(English%2FFrench)%2C%20and%20the%20title%20in%20AD%20has%20be%20in%20French%20if%20the%20user's%20preferred%20language%20is%20French.%20However%2C%20we%20have%20an%20issue%20to%20get%20the%20French%20translation%20into%20AD%20and%20we%20were%20told%20that%20Workday%20calculated%20fields%20are%20not%20support%20by%26nbsp%3BAD%20Azure%20provisioning.%20Is%20there%20a%20workaround%20to%20make%20the%20French%20translation%20working%3F%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2059368%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2059368%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F927619%22%20target%3D%22_blank%22%3E%40wtian%3C%2FA%3E%26nbsp%3BThis%20is%20an%20interesting%20requirement.%20The%20Workday%20connector%20directly%20consumes%20the%20response%20from%20%3CA%20href%3D%22https%3A%2F%2Fcommunity.workday.com%2Fsites%2Fdefault%2Ffiles%2Ffile-hosting%2Fproductionapi%2FHuman_Resources%2Fv35.0%2FGet_Workers.html%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EGet_Workers%20API%3C%2FA%3E%20call%20and%20I%20couldn't%20find%20a%20way%20in%20it%20to%20specify%20retrieval%20of%20locale-specific%20values.%20In%20the%20Workday%20community%2C%20there%20is%20a%20suggestion%20to%3CSPAN%3E%26nbsp%3Bcreate%20the%20ISU%20with%20a%20preferred%20language%20of%20French.%20Did%20you%20get%20a%20chance%20to%20try%20this%20option%3F%20If%20that's%20not%20feasible%2C%20then%20you%20could%20use%20a%20Switch%20expression%20mapping%20as%20a%20workaround.%20Configure%20expression%20mapping%20for%20department%20and%20title%20using%20a%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fapp-provisioning%2Ffunctions-for-customizing-application-data%23switch%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESwitch%20function%3C%2FA%3E.%20The%20Switch%20function%20should%20take%20as%20input%20English%20values%20and%20return%20the%20French%20translation%20of%20the%20string.%20Feel%20free%20to%20send%20me%20a%20direct%20message%20and%20I%20can%20help%20review%20the%20expression.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2066235%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2066235%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F182937%22%20target%3D%22_blank%22%3E%40Chetan%20Desai%3C%2FA%3E%26nbsp%3B%20For%20departments%2C%20we%20have%20more%20700%20and%20they%20could%20be%20changed%20from%20time%20to%20time.%20To%20use%20Switch%20function%2C%20we%20have%20to%20hardcode%20all%20the%20department%20names%20for%20both%20English%20and%20French%2C%20and%20maintain%20the%20list%20on%20regular%20basis%20which%20is%20not%20an%20ideal%20solution.%20And%20yes%2C%20we%20are%20navigating%20the%20option%20by%20using%20French%20language%20on%20the%20ISU%20and%20we%20are%20able%20to%20get%20the%20French%20translation%20from%20Workday%20to%20AD.%20Basically%2C%20we%20have%202%20provisioning%3A%20one%20for%20English%20and%20one%20for%20French.%20However%2C%20the%20provisioning%20overwrites%20each%20other.%20We%20want%20to%20use%20AD%20attribute%20in%20the%20Expression%20to%20avoid%20the%20overwriting%20but%20without%20success.%20For%20example%2C%20in%20the%20English%20provisioning%2C%20we%20want%20to%20update%20AD%20department%20attribute%20only%20if%20the%20user%20language%20is%20English%3B%20otherwise%2C%20keep%20the%20AD%20department%20as%20it%20is%2C%20some%20like%20IIF(%5BUserLanuage%5D%3D%22en_US%22%2C%5BSupervisorOrganization%5D%2C%5BAD%20department%5D).%20The%20problem%20is%20the%20Azure%20AD%20reported%20that%20%5BAD%20department%5D%20is%20not%20a%20recognized%20attribute.%20Is%20there%20a%20way%20to%20use%20AD%20attribute%20in%20Expression%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%20Wen%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2066265%22%20slang%3D%22en-US%22%3ERe%3A%20Say%20good-bye%20to%20custom%20scripts%20and%20simplify%20your%20workforce%20identity%20lifecycle%20with%20Workday%20and%20A%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2066265%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F927619%22%20target%3D%22_blank%22%3E%40wtian%3C%2FA%3E%26nbsp%3BGood%20to%20know%20that%20with%20French%20language%20on%20the%20ISU%2C%20you%20are%20now%20able%20to%20get%20the%20French%20values%20for%20department.%20In%20the%20expression%20mapping%2C%20using%20target%20AD%20attributes%20is%20not%20supported.%20To%20handle%20your%20specific%20requirement%2C%20I%20think%20it%20may%20be%20possible%20to%20use%20scoping%20filters.%20Can%20you%20send%20me%20a%20direct%20message%20with%20your%20contact%20email%3F%20Let's%20setup%20a%20meeting%20to%20go%20over%20this%20scenario%20next%20week.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3EChetan%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Jul 24 2020 01:46 AM
Updated by: