Workday to AAD/AD provisioning query scope
Workday to AD/AAD provisioning
please add the ability to scope the query passed to getworkers api. For instance, pass to getworkers company=schoolA.
Workday is now implementing shared tenants in the EDU space. In a shared tenant, the current query to get_workers pulls all workers and then allows scoping. but the worker data for all schools has to be pulled before it can be scoped. The result is AAD audit logs saturated with other schools employee data. Also need to be able to control audit data written to azure activity logs, or at least be able to clear the provisioning logs.
Hi we are working on pulling the provisioning events out of the audit logs so that they are easier to manage. I’ll reach out to people internally about being able to set the scope to a particular school.
Great idea! I'll add that there is some data we would like to see from the future. In the Workday API, you can choose to show data with an effective date. Being able to set which attributes use an "EffectiveDate" qualifier and how far in the future that date lies, could open a lot of possibilities. For example, we may want future-dated new hires to show up with their title info in AD, meanwhile current employees we wouldn't want that title to be updated until the effective date.