About Workday RaaS
Run web-service-enabled Workday Reports as a Service (RaaS) reports with a dedicated least-privilege Workday account.
Describe what should happen in Workday RaaS, and when, in plain words. Whenever builds the workflow and runs it on a schedule, on a webhook, or when another app sends an event.
Connection requirements, provider permissions and optional AI usage apply. Read the runtime limits.
Run web-service-enabled Workday Reports as a Service (RaaS) reports with a dedicated least-privilege Workday account.
Through its API, using the credentials and permissions required by the provider.
Connect Claude, Cursor or Codex to the Whenever MCP server and your coding agent can build and deploy the Workday RaaS workflow. It runs on Whenever afterwards, on its schedule or webhook, with the chat closed.
Set up the Whenever MCP serverMost Workday automation requests turn out to be reporting requests: a weekly list of new hires for IT provisioning, headcount by cost centre for finance, or open requisitions for a recruiting stand-up. Reports as a Service covers exactly that. An administrator builds an advanced custom report in Workday, enables it as a web service, and shares it with an integration system user. The report then has its own URL under the tenant’s customreport2 service, and a request to that URL returns the current results.
The output format is chosen in the request, for example format=json; the View URLs page also lists XML and other formats. Report prompts, such as an effective date or a supervisory organisation, become URL query parameters, and their names come from the prompt configuration in the report definition, which is why a renamed prompt quietly breaks a scheduled call. Field names in the output come from the XML aliases in the report definition, so keep those stable too.
Security is the real design work. The usual setup is a dedicated integration system user in its own security group, with the report shared to it on the report’s Share tab; without that share, requests are refused. Keep that account’s security domains to what the report needs. Authentication is commonly basic credentials for the integration user, and some tenants use OAuth through an API client instead, so confirm what your Workday administrator has configured.
RaaS is read-only. It returns report rows; it does not hire, terminate or change data, which keeps this connection low-risk but means write-back belongs in a separate, approved web service. Filter in the report definition with prompts such as a date range rather than pulling everything and filtering afterwards. Because the report reflects current data at request time, store each run’s key values if you need to detect changes between runs.
Authored starter briefs to configure with your accounts, not preconfigured workflows.
Runs a prompted report each weekday and only alerts on workers not seen before.
Turns a RaaS report into fixed totals finance can compare month to month.
A read-only report summary; changes to requisitions still happen in Workday.
The report must be an advanced custom report with “Enable As Web Service” checked. Then choose Web Service > View URLs on the report and copy the JSON link.
A dedicated integration system user in a security group that has only the domains the report needs. Share the report with that user or group, or calls will be refused.
Yes. Add format=json to the report URL, or copy the JSON link from View URLs.
Report prompts become query parameters named after the prompt’s XML alias, such as Start_Date. If the alias changes, update the workflow too.
No. RaaS only returns report data. Creating or changing records goes through Workday’s other web services, with their own security setup.
Describe your first workflow in plain words. One stays live for free, no credit card.
No credit card required