Getting data out of Workday isn't necessarily straightforward, especially if that data needs to go to an external platform or partner. Fortunately, Workday supports exporting data as files that can be transferred via SFTP, and these files can be scheduled to be sent regularly.
Depending on the type of data you want to export, the setup process is slightly different and the requirements may vary slightly. For this guide, we'll focus on a common scenario with Workday: Exporting custom reports via SFTP using EIB.
For this guide, we'll use Couchdrop for the example since setup is simple and only takes minutes.
Choosing Workday data to export
To export Workday data as files via SFTP, you need to choose the data to export, set up SFTP on Workday, and then configure the SFTP endpoint to receive the file export.
The first step is turning the data into a file, which you can do directly in Workday with the Create Custom Report task. For SFTP, you'd typically want this configuration:
- Report type: Advanced
- Temporary Report: No (Unchecked)
- Enable As Web Service: Yes (Checked) - this enables Reporting-as-a-service as a dataset, so that it can be called on for other services such as for SFTP exports.
- Optimized for Performance: No (Unchecked) - This option prioritizes speed over compatibility and may cause SFTP exports to fail
- Data Source - All Active and Terminated Workers - This allows reports to use data for all sources. It can be limited for each report.
Finally, you'll need to include the actual data itself. You can choose any columns and fields for your report. Once you've included all the data you need, the next step is to set up the SFTP export.
Setting up the SFTP endpoint
With Couchdrop, creating an SFTP endpoint is simple. First, connect your destination, or create/choose a directory in Couchdrop hosted storage.
In the case of Couchdrop, the destination can be a folder in any compatible storage platform. So if the SFTP user is isolated to a SharePoint directory, what you'll essentially be doing is SFTP the files from Workday to SharePoint. Files are also streamed directly between platforms and never retained by Couchdrop when you choose to bring your own storage.
After connecting your storage, choose to create a new SFTP user. Couchdrop can autogenerate a user with SFTP permissions and isolate them to the directory you created to act as the root. You'll need user credentials to pass to Workday in order for the platform to export data to Couchdrop, so keep these on hand for the next step.
Workday SFTP setup
While setting up SFTP in Couchdrop is quick and simple, the process is a little more involved in Workday.
Setting up SSH Keys (Optional)
If you want to use SSH keys, you'll need to configure them before setting up the outbound SFTP connection. To do this in Workday, search for Create x509 Private Key Pair and complete the fields.
If you're unfamiliar with SSH keys and how they work, see our article What is an SSH key and how are they used for SFTP?
Setting up the transfer task
With the endpoints set up and the data ready to export, it's time to set up the actual transfer.
In Workday, choose Create EIB task and select Outbound. Complete the Get Data section (make sure to select the report you configured earlier) and choose an output file format.
Select the Deliver tab and choose SFTP as the delivery method.
Fill out the required fields for your Couchdrop server using the details for the user created previously. If you've already scoped the user to the destination you want the file to land in, you can simply use "/" in the directory field, as it's a relative path.
Name the file (you can change this later in Couchdrop) and then move on to scheduling.
Exporting Workday files via SFTP
Once you've added the fields, you need to launch/schedule the export. Navigate back to the 'Integration' and choose Launch / Schedule and set your schedule.
After finishing the schedule configuration, you can test that the export works successfully by checking if the file arrived either in Couchdrop or in the storage system itself.
Advanced data flows - automations, decryptions, and more with Couchdrop
Because many Workday reports include sensitive employee data like PII, it's not uncommon to add extra protections such as PGP encryption. Fortunately, both Couchdrop and Workday support SFTP with PGP.
For Workday, you'll need to set up PGP encryption with the Create PGP Public Key task. For more information on generating these key pairs and how they work, see How to automate SFTP file transfers with PGP encryption and decryption.
Both decryptions and automated workflows can be created using the visual automation builder in Couchdrop. For PGP, add a decryption step as part of the workflow and select the corresponding public and private keys. You can also add other steps along with the decryption like renaming, copying, and routing the file.
With Couchdrop, you can also add DLP to every file transfer using Transfer Shield. This can be especially useful for Workday data since it often includes information that should be tightly controlled.
If you don't have a Couchdrop account yet, you can try all of these features free for 14 days with no credit card or demo required. Simply register for an account and get instant access now.