Workday Access Import - Incremental

[shibinvpkvr]

Hi, 

Need inputs from people worked in Workday connector as a managed app. 

per Workday connector guide https://docs.saviyntcloud.com/bundle/WD2-v2021x/page/Content/About-this-Guide.htm

inc_url is mentioned in reportUrlMapping for following access types : Security Group, Domain Security Policy and Business Process Security Policy

It is not mentioned for other access types. Is this used for incremental access import? if yes, how does the other access types will behave for incremental access import? When we tried to run incremental access import, the job failed with following error.

**All reports are setup per Saviynt documentation**

Error processTasksAndReports

Response Status code: 500 Error: {"responseMessage":"400 : Validation error occurred. Invalid Parm Last_Updated for report urn:com.workday.report/OT_ReportsTasksViewModify"}

Also on a separate note, we noticed that if there are any errors in the import, it is wiping out all security groups from the Workday account in Saviynt. Just wanted to know if this is expected behavior for Workday connector.

This is very risky for user based security groups because, the Workday API is for a full replace all the time. It will get all the existing user based security groups and do a +- based on add/remove access. Then send the net list of security groups to Workday. If that happens following a failed import from Workday then user's access will be messed up in Workday because existing user based security groups will be empty in Saviynt if the access import has an error (only if the error is related to security group import)

Can anyone give your inputs here? 

[This post has been edited by a Moderator to remove tagging an employee).]

[Raghu]

@shibinvpkvr  check connectivity workday connector working or not ?

[shibinvpkvr]

There is no connectivity issue. It is working fine for full import. Wanted to know the feasibility for incremental import.