Workday does not currently offer SCIM-based user provisioning. Stepwork automates Workday provisioning with 98% accuracy — no API required.
No SCIM Support Complexity Vector: Automation fails because HR systems are highly stateful and control-heavy (job changes, effective dates, approvals, security domains). Lifecycle actions are rarely “atomic,” and changes must respect approvals, audit logs, and role-based security that’s typically validated in the UI.
For security and finance teams, Workday is a system of record where auditors require a provable chain of custody for hiring, role changes, terminations, and approval actions. Stepwork delivers time-stamped, tamper-evident evidence collection around those events, providing audit-ready proof without relying on manual reports or screenshots. This is why teams use Stepwork to automate Expensify flows with 98% accuracy without needing an API.
Workday supports SAML sign-on. Stepwork authenticates through your existing identity provider — the same way your employees do.
No. Workday does not currently offer SCIM-based user provisioning, leaving IT teams to manage user lifecycle changes manually.
Stepwork automates Workday provisioning through interface automation — the same way a human would, but with 98% accuracy and no API required. Record the flow once, and Stepwork runs it on demand or on a schedule.
Yes. Stepwork authenticates to Workday through your existing identity provider (Okta, Microsoft Entra ID, 1Password, etc.) and completes MFA natively — including OTP, passkeys, and push notifications. No separate credentials or service accounts are needed.
The primary risk is access provisioning is complex and manual. Additional risks include slowing onboarding, increasing risk, difficult to audit at scale. Stepwork eliminates these risks by automating the entire provisioning workflow.
See how Stepwork provisions users in Workday with 98% accuracy — in a 15-minute demo.
Book a DemoNo. Stepwork completes MFA exactly like a human user — supporting OTP, passkeys, push notifications, and other methods. It signs in through your existing identity provider via SAML, mirroring your organization's security posture.