Workday IAM Event Generator (Beta)

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

beta

This is a beta Integration, which lets you implement and test pre-release software. Since the integration is beta, it might contain bugs. Updates to the integration during the beta phase might include non-backward compatible features. We appreciate your feedback on the quality and usability of the integration to help us identify issues, fix them, and continually improve.

Generates mock reports and events for Workday IAM. Use these for testing and development.

Configure Workday_IAM_Event_Generator on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for Workday_IAM_Event_Generator.

  3. Click Add instance to create and configure a new integration instance.

    ParameterRequired
    Long running instanceTrue
    Port mapping (<port> or <host port>:<docker port>)True
    Incident typeFalse
  4. Click Test to validate the URLs, token, and connection.

Create an instance#

To configure a long running integration to be accessed via Cortex XSOAR Server's https endpoint perform the following:

  1. Configure the long running integration to listen on a unique port

  2. Add the following advanced Server parameter:

    • Name: instance.execute.external.<instance_name>
    • Value: true

    For example for an instance named edl set the following: Name: instance.execute.external.workday_iam_event_generator_instance_1 Value: true

    Note: The instance name is configured via the Name parameter of the integration.

You will then be able to access the long running integration via the Cortex XSOAR Server's HTTPS endpoint. The route to the integration will be available at: https://<server_hostname>/instance/execute/<instance_name>

Use this URL to configure Workday_IAM integration and invoke Fetch_incidents

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

workday-generate-hire-event#


Generate workday new hire event.

After running this command, a new incident will be created of type: IAM - New Hire

Base Command#

workday-generate-hire-event

Input#

Argument NameDescriptionRequired
user_emailThe user email for the event.Required
first_nameThe new user first name.Optional
last_nameThe new user last name.Optional

Command Example#

!workday-generate-hire-event user_email=testing@test.com first_name=John last_name=Smith

Human Readable Output#

Successfully generated the new hire event.

workday-generate-update-event#


Generate workday update event.

After running this command, a new incident will be created of type: IAM - Update User

Base Command#

workday-generate-update-event

Input#

Argument NameDescriptionRequired
user_emailThe user email for the event.Required
titleThe user updated title.Optional
cityThe user city.Optional
street_addressThe updated street address.Optional
last_day_of_workThe last hire date for the user. For example: "06/15/2020". This will trigger "terminate" event.Optional

Command Example#

!workday-generate-update-event user_email=panw@test.com city="Tel Aviv" title="Software Engineer"

Human Readable Output#

Successfully generated the Update user event.

workday-generate-rehire-event#


Generate workday rehire event.

After running this command, a new incident will be created of type: IAM - Rehire User

Base Command#

workday-generate-rehire-event

Input#

Argument NameDescriptionRequired
user_emailThe user email for the event.Required

Command Example#

!workday-generate-rehire-event user_email=panw@testing.com

Human Readable Output#

Successfully generated the rehire user event.

workday-generate-terminate-event#


Generate workday terminate event.

After running this command, a new incident will be created of type: IAM - Terminate User

Base Command#

workday-generate-terminate-event

Input#

Argument NameDescriptionRequired
last_day_of_workThe last hire date of the user. For example: "06/15/2020". The default is today.Optional
user_emailThe user email to termniate.Required
termination_dateThe user termination date. For example: "06/15/2020". The default is today.Optional

Command Example#

!workday-generate-terminate-event user_email=panw@testing.com

Human Readable Output#

Successfully generated the Terminate user event.

initialize-context#


Reset the integration context to fetch the first run reports.

Base Command#

initialize-context

Input#

There are no input arguments for this command.

Command Example#

!initialize-context

Human Readable Output#

The integration context has been initialized.