The Workday Pro Integrations Certification Exam (Workday-Pro-Integrations)

This is a validation requirement, not a fixed-width formatting requirement. The goal is to confirm that required XML elements are not empty and to raise custom error messages with a defined severity. Workday’s ETV attributes are used for this type of validation behavior. etv:required= " true " marks the value as mandatory, etv:severity= " error " defines the severity level, and etv:name provides the custom validation message name shown when the rule fails. XTT attributes are primarily used for text transformation and formatting, such as fixed length, alignment, padding, and truncation handling. The target attribute is not the correct severity control in this context. Therefore, the ETV required, severity, and name attributes are the correct configuration.

================

When creating a Date Difference calculated field in Workday, both dates must exist on the same business object. If they are on different business objects, you need to first bring the second date onto the primary object. To do that, you use a:

Lookup Related Value calculated field — this allows you to retrieve a field (like a date) from a related business object, so it can then be used in further calculations.

Example scenario:

You want to subtract Hire Date (on the Worker object) from Dependent’s Birth Date (on the Dependent object).

These are on different objects → use Lookup Related Value to pull the second date into the current object context.

Then, create the Date Difference using both dates on the same object.

Why other options are incorrect:

B. Build Date creates a synthetic date, not for bridging objects.

C. Lookup Date Rollup rolls up values across multiple related objects, not typically used for 1-to-1 value bridging.

D. Lookup Value as of Date is used for time-sensitive lookups (e.g., point-in-time values), not structural bridging.

The scenario involves a Core Connector: Worker integration using DIS to export a full file of personal data, restricted to employees only (excluding contingent workers). In Workday, the Worker business object includes both employees and contingent workers, so a filter is needed to limit the population. Let’s explore the configuration:

Requirement:Ensure the integration outputs only employees, not contingent workers. This is a population-level filter, not a field transformation or override.

Integration Population Eligibility:In Core Connectors, the Configure Integration Population Eligibility related action defines which workers are included in the integration’s dataset. You can set eligibility rules, such as " Worker Type equals Employee " (or exclude " Contingent Worker " ), to filter the population before data is extracted. For a full file export (no change detection), this ensures the entire output is limited to employees.

Option Analysis:

A. Configure the Integration Population Eligibility: Correct. This filters the worker population to employees only, aligning with the requirement at the dataset level.

B. Configure a map for worker type in the Integration Maps: Incorrect. Integration Maps transform field values (e.g., " Employee " to " EMP " ), not filter the population of workers included in the extract.

C. Configure worker type in the Integration Field Attributes: Incorrect. Integration Field Attributes refine how a field is output (e.g., phone type), not the overall population eligibility.

D. Configure eligibility in the Integration Field Overrides: Incorrect. Integration Field Overrides replace field values with custom data (e.g., a calculated field), not define the population of workers.

Implementation:

Edit the Core Connector: Worker integration.

Use the related action Configure Integration Population Eligibility.

Add a rule: " Worker Type equals Employee " (or exclude " Contingent Worker " ).

Save and test to ensure only employee data is exported.

References from Workday Pro Integrations Study Guide:

Core Connectors & Document Transformation: Section on " Configuring Integration Population Eligibility " explains filtering the worker population for outbound integrations.

Integration System Fundamentals: Discusses population scoping in Core Connectors to meet specific export criteria.

For an EIB that uses a custom report, the report must return only the correct worker population before the integration extracts the data. Because “Dependents” is a related multi-instance object, the correct approach is to use a subfilter on the Dependents business object to restrict the related dependent records to the Child relationship. Then the report-level filter ensures that the Dependents field is not empty after the subfilter is applied. This combination prevents workers without child dependents from being included. A filter alone on the Worker business object would not correctly evaluate the dependent relationship detail, and prompting the user for “Child” is unnecessary because the requirement is fixed. This is a reporting configuration issue used to control integration output.

================

In Workday, when refining a custom report to include specific conditions such as limiting the output to workers hired in the last 30 days, the appropriate place to specify this condition is within the Filter tab of the custom report definition. The Filter tab allows you to define criteria that determine which instances of the primary business object (in this case, " Worker " ) are included in the report output. This is critical for integrations, as the filtered data ensures that only relevant records are sent to the third-party system.

The requirement here is to restrict the report to workers hired within the last 30 days. In Workday reporting, this can be achieved by adding a filter condition on the " Hire Date " field of the Worker business object. Specifically, you would configure the filter to compare the " Hire Date " against a dynamic date range, such as " Current Date minus 30 days " to " Current Date. " This ensures the report dynamically adjusts to include only workers hired in the last 30 days each time it runs, which aligns with the needs of an integration sending real-time data to a third-party system.

Here’s why the other options are incorrect:

A. Subfilter: Subfilters in Workday are used to further refine data within a related business object or a subset of data already filtered by the primary filter. They are not the primary mechanism for applying a condition to the main dataset (e.g., all workers). For this scenario, a subfilter would be unnecessary since the condition applies directly to the Worker business object, not a related object.

B. Output: The Output section of a custom report definition controls how the report is displayed or delivered (e.g., file format, scheduling), not the data selection criteria. It does not allow for specifying conditions like hire date ranges.

C. Columns: The Columns tab defines which fields are displayed in the report output (e.g., Worker ID, Name, Hire Date). While you can add the " Hire Date " field here for visibility, it does not control which workers are included in the report—that is the role of the Filter tab.

To implement this in practice:

In the custom report definition, go to the Filter tab.

Add a new filter condition.

Select the " Hire Date " field from the Worker business object.

Set the operator to " in the range " and define the range as " Current Date - 30 days " to " Current Date " (using dynamic date functions available in Workday).

Save and test the report to ensure it returns only workers hired within the last 30 days.

This filtered report can then be enabled as a web service (via the Advanced tab) or used in an Enterprise Interface Builder (EIB) or Workday Studio integration to send the data to the third-party system, meeting the integration requirement.

References from Workday Pro Integrations Study Guide:

Workday Report Writer Fundamentals: Section on " Creating and Managing Filters " explains how filters are used to limit report data based on specific conditions, such as date ranges.

Integration System Fundamentals: Discusses how custom reports serve as data sources for integrations and the importance of filters in defining the dataset.

Core Connectors & Document Transformation: Highlights the use of filtered custom reports in outbound integrations to third-party systems.

Payroll results usually contain multiple related rows, so the report must identify the correct payroll result instance before outputting a single value. A True/False Condition is used to define which deduction rows qualify for evaluation, such as identifying valid deduction results. Extract Single Instance is then used to return one instance from that qualified set, typically based on a sort or selection rule that identifies the highest deduction. Evaluate Expression is unnecessary because the requirement is not an if/then output selection; it is selecting one related instance from a multi-instance group. Text Constant is also irrelevant because no fixed text value is being added to the output. This is a data transformation problem inside a report-driven EIB.

================

In Workday integrations, XSLT is used to transform XML data, such as the output from a web service-enabled report or EIB, into a desired format for third-party systems. In this scenario, you need to create an XSLT template that matches the wd:Education_Group element in the provided XML and transforms it to produce the degree data in the format shown in the Transformed_Record example. The goal is to output each degree (e.g., " California University MBA " and " Georgetown University B.S. " ) as a < Degree > element within a < Degrees > parent element.

Here’s why option A is correct:

Template Matching: The < xsl:template match= " wd:Education_Group " > correctly targets the wd:Education_Group element in the XML, which contains multiple wd:Education elements, each with a wd:Degree child, as shown in the XML snippet (e.g., < wd:Education > California University < /wd:Education > < wd:Degree > MBA < /wd:Degree > ).

Transformation Logic:

< Degree > creates the outer < Degree > element for each education group, matching the structure in the Transformed_Record example (e.g., < Degree > California University MBA < /Degree > ).

< xsl:copy > < xsl:value-of select= " * " / > < /xsl:copy > copies the content of the child elements (wd:Education and wd:Degree) and concatenates their values into a single string. The select= " * " targets all child elements of wd:Education_Group, and xsl:value-of outputs their text content (e.g., " California University " and " MBA " become " California University MBA " ).

This approach ensures that each wd:Education_Group is transformed into a single < Degree > element with the combined text of the wd:Education and wd:Degree values, matching the example output.

Context and Output: The template operates on each wd:Education_Group, producing the nested structure shown in the Transformed_Record (e.g., < Degrees > < Degree > California University MBA < /Degree > < Degree > Georgetown University B.S. < /Degree > < /Degrees > ), assuming a parent template or additional logic wraps the < Degree > elements in < Degrees > .

Why not the other options?

B.

xml

WrapCopy

< xsl:template match= " wd:Education_Group " >

< Degree >

< xsl:value-of select= " * " / >

< /Degree >

< /xsl:template >

This uses < xsl:value-of select= " * " / > without < xsl:copy > , which outputs the concatenated text of all child elements but does not preserve any XML structure or formatting. It would produce plain text (e.g., " California UniversityMBACalifornia UniversityB.S. " ) without the proper < Degree > tags, failing to match the structured output in the example.

C.

xml

WrapCopy

< xsl:template match= " wd:Education_Group " >

< Degree >

< xsl:copy select= " * " / >

< /Degree >

< /xsl:template >

This uses < xsl:copy select= " * " / > , but < xsl:copy > does not take a select attribute—it simply copies the current node. This would result in an invalid XSLT syntax and fail to produce the desired output, making it incorrect.

D.

xml

WrapCopy

< xsl:template match= " wd:Education_Group " >

< Degree >

< xsl:copy-of select= " * " / >

< /Degree >

< /xsl:template >

This uses < xsl:copy-of select= " * " / > , which copies all child nodes (e.g., wd:Education and wd:Degree) as-is, including their element structure, resulting in output like < Degree > < wd:Education > California University < /wd:Education > < wd:Degree > MBA < /wd:Degree > < /Degree > . This does not match the flattened, concatenated text format in the Transformed_Record example (e.g., < Degree > California University MBA < /Degree > ), making it incorrect.

To implement this in XSLT for a Workday integration:

Use the template from option A to match wd:Education_Group, apply < xsl:copy > < xsl:value-of select= " * " / > < /xsl:copy > to concatenate and output the wd:Education and wd:Degree values as a single < Degree > element. This ensures the transformation aligns with the Transformed_Record example, producing the required format for the integration output.

Workday Pro Integrations Study Guide: Section on " XSLT Transformations for Workday Integrations " – Details the use of < xsl:template > , < xsl:copy > , and < xsl:value-of > for transforming XML data, including handling grouped elements like wd:Education_Group.

Workday EIB and Web Services Guide: Chapter on " XML and XSLT for Report Data " – Explains the structure of Workday XML (e.g., wd:Education_Group, wd:Education, wd:Degree) and how to use XSLT to transform education data into a flattened format.

Workday Reporting and Analytics Guide: Section on " Web Service-Enabled Reports " – Covers integrating report outputs with XSLT for transformations, including examples of concatenating and restructuring data for third-party systems.

In Workday, after configuring an Integration System User (ISU) and an Integration System Security Group (ISSG) with the appropriate security policies and assigning them to an Enterprise Interface Builder (EIB) integration, there is a critical step required before the EIB can be launched successfully. This step ensures that all security configurations and permissions assigned to the ISSG take effect in the Workday tenant. Let’s analyze the question and evaluate each option systematically to determine the correct task, ensuring the answer aligns with Workday’s documented processes and the Workday Pro Integrations Study Guide.

Context of the Scenario

You’ve completed the following:

Created an ISU and configured it (e.g., with " Do Not Allow UI Sessions " checked for web service-only access).

Set up an ISSG and assigned the ISU to it.

Defined the necessary security policies (e.g., domain security policies with " Get " and/or " Put " access) for the ISSG to support the EIB’s operations.

Assigned the ISU and ISSG to the EIB integration system.

The question now is what must be done before launching the EIB to ensure it functions as intended. In Workday, changes to security policies—such as adding permissions to an ISSG—do not take effect immediately. They remain in a " pending " state until activated, which is a key aspect of Workday’s security administration process.

Evaluation of Options

Option A: Activate Pending Security Policy ChangesIn Workday, whenever you modify security policies (e.g., granting domain permissions like " Integration Build " or " Custom Report Creation " to an ISSG), these changes are staged as " pending. " To apply them to the tenant and make them active, you must run the " Activate Pending Security Policy Changes " task. This task reviews all pending security updates, allows you to add a comment for audit purposes, and, upon confirmation, activates the changes. Without this step, the ISSG will not have the effective permissions required for the EIB to access data or execute its operations, potentially causing the launch to fail due to insufficient authorization. This aligns directly with the scenario, as security policies have been configured and assigned, but not yet activated.

Option B: View Security for Securable ItemThe " View Security for Securable Item " report is a diagnostic tool in Workday that allows you to inspect the security configuration for a specific object (e.g., a web service operation, report, or task). It shows which security groups have access and what permissions (e.g., " Get, " " Put, " " View, " " Modify " ) are granted. While this is useful for verifying that the ISSG has the correct policies assigned, it is a passive report—it does not modify or activate anything. Running this task would not enable the EIB to launch, as it doesn’t affect the pending security changes. Thus, it’s not the required step before launching the EIB.

Option C: Assign the ISSG to only one security policyThis option suggests limiting the ISSG to a single security policy, but this is neither a standard Workday requirement nor a task that exists as a standalone action. ISSGs can and often do have multiple security policies assigned (e.g., permissions for various domains like " Integration Build, " " Custom Report Access, " etc.), depending on the integration’s needs. Moreover, the question states that the ISSG has already been configured with the " correct security policies " and assigned to the EIB, implying this step is complete. Restricting the ISSG to one policy after the fact would require editing permissions again, triggering more pending changes, and still necessitate activation—making this option illogical and incorrect.

Option D: Maintain Integration Security PoliciesThere is no specific task in Workday called " Maintain Integration Security Policies. " This option seems to be a misnomer or a conflation of other tasks, such as " Maintain Domain Permissions for Security Group " (used to assign permissions to an ISSG) or broader security maintenance activities. However, the question indicates that the security policies are already correctly configured and assigned. If this option intended to imply further configuration, it would still result in pending changes requiring activation via Option A. As a standalone action, it does not represent a valid or necessary task to enable the EIB launch.

Why Option A is Correct

The " Activate Pending Security Policy Changes " task is a mandatory step in Workday’s security workflow after modifying security policies, such as those assigned to an ISSG for an EIB. Workday’s security model uses a pending changes queue to ensure that updates are reviewed and deliberately applied, maintaining control and auditability. Without activating these changes:

The ISSG will lack the effective permissions needed for the EIB to access required domains or perform its operations (e.g., retrieving data from a custom report or delivering a file).

The EIB launch could fail with errors like " Insufficient Privileges " or " Access Denied. "

Running this task ensures that the security configuration is live, allowing the ISU (via the ISSG) to authenticate and execute the EIB successfully. This is a standard practice in Workday integration setup, as emphasized in the Workday Pro Integrations curriculum.

Practical Steps to Perform Option A

Log into the Workday tenant with a security administrator role.

Search for and select the " Activate Pending Security Policy Changes " task.

Review the list of pending changes (e.g., new permissions added to the ISSG).

Enter a comment (e.g., " Activating security for EIB launch – ISSG permissions " ).

Check the " Confirm " box and click " OK " to activate the changes.

Once completed, the security policies are live, and the EIB can be launched.

Verification with Workday Documentation

The Workday Pro Integrations Study Guide and related training materials confirm that activating pending security policy changes is a prerequisite after configuring security for integrations. This step ensures that all permissions are in effect, enabling the ISU and ISSG to support the EIB’s functionality. Community resources and implementation guides also consistently highlight this task as the final step before launching integrations that rely on updated security settings.

Workday Pro Integrations Study Guide References

Section: Integration Security Configuration – Explains the process of assigning security policies to ISSGs and the need to activate changes to operationalize them.

Section: Enterprise Interface Builder (EIB) – Notes that security updates for EIBs must be activated before launching to ensure proper access.

Section: Security Administration – Details the " Activate Pending Security Policy Changes " task as the mechanism to apply pending security modifications across the tenant.

The Test Security Related Action shows Available by User = No when the security group running the integration lacks View permissions to the fields used in the override logic.

From Workday documentation:

Field Overrides require the ISSG to have View access to the domain policies securing each field referenced in the override, otherwise Workday blocks the field from execution.

Therefore, the appropriate fix is to:

• Identify the domains that secure the calculated fields and overridden fields

• Grant the ISSG View access in those domain security policies

• Activate pending changes

Options B and C incorrectly focus only on web service operations.

Option D incorrectly suggests Modify access — but View is the required minimum.