Managing Workday access in Saviynt

[erinelewis]

We're early on in our Workday project. We're trying to determine our role in this project. Today we use Lawson and it's one of our authoritative sources of identities  AND we manage Lawson as a requestable application.

We've been on several Workday calls so far and they don't seem to understand why we would manage Workday access in Saviynt. They said that it can be managed all in Workday and is typically assigned to the job position and not requested person by person. I understand there's a connector so it seems like there must be some usecase for managing Workday access in Saviynt.

Could anyone say why they did decide to use Saviynt to manager Workday access or why they didn't?

[Rajesh-R]

Hi Erine Lewis,

There can be many scenarios why they decided to use Saviynt to Manage Workday Access using the Saviynt's Workday Connector. Listing out some of the examples,

1. A new joiner email id and the unique username would be generated in Saviynt, we use the Managed Workday Connector to push the username and email to the Workday Record.

2. Saviynt can manage the Birthright Workday accesses Assignments based on the changes in Department / Function / Cost center / Company  / Segment in the users profile.

3. Periodically conducting User Access Reviews in Saviynt, to make sure the audit Compliance is met. For the User Access Review to take automated remediation, we would need the Workday Connector to revoke the accesses.

4. Saviynt can also perform the Application Access governance on the Workday , where both Preventative and Detective Segregation of Duties can be enforced in Saviynt.

Hope this helps.