Workday HCM API Request
User activity and API interactions
Records user interactions with Workday HCM mobile and web applications, including API calls, dashboard views, and system actions. Captures READ and WRITE operations without document downloads.
Overview
Captures user interactions with Workday HCM applications through API calls, including mobile app usage, web portal access, and system task execution. Tracks READ and WRITE operations across the platform.
When Generated:
- When a user opens the Workday mobile app and views their dashboard
- When a user accesses their timesheet, payslip, or benefits information
- When a user performs searches or navigates through the application
- When system processes execute automated tasks on behalf of users
- When users interact with calendar, absence, or approval workflows
Security Relevance:
MediumCompliance:
Frequency Notes:
Very high frequency during business hours with mobile usage patterns. Expect 2,400+ events/hour base rate with 3x multiplier during business hours (7,200 events/hour), reduced activity during nights (960 events/hour) and weekends (480 events/hour). Mobile app interactions generate bursts of 5-15 API calls per user action.
Resources
Documentation
- Workday HCM Documentation official
- Workday API Reference official
- Workday Security and Privacy official
Tools
-
LogForge CLI
Command-line tool for template validation and log generation
-
Workday Studio
Eclipse-based IDE for Workday integrations and custom development
Generation Configuration
Field Definitions
Complete field reference for this event type with data types, descriptions, and example values.
| Field Name | Type | Required | Format | Description | Example | Possible Values |
|---|---|---|---|---|---|---|
|
deviceType
Source: random_choice(['Phone', 'Desktop', 'Tablet'])
|
String | Required | — | Type of device used to access Workday (Phone, Desktop, Tablet) |
Phone
|
Phone
— Mobile smartphone device
Desktop
— Desktop computer or laptop
Tablet
— Tablet device
|
|
ipAddress
Source: random_public_ip()
|
String | Required |
IPv4
|
Public IP address of the user's device |
108.147.198.52
|
— |
|
systemAccount
Source: random_int(10000, 999999) formatted as 6-digit zero-padded string
|
String | Required |
6-digit zero-padded string
|
Workday internal user identifier (6-digit zero-padded number) |
000077206
|
— |
|
requestTime
Source: now() | iso8601
|
DateTime | Required |
ISO 8601 with milliseconds and Z suffix
|
Timestamp of the API request in ISO 8601 format (UTC) |
2025-12-20T21:53:19.988Z
|
— |
|
taskId
Source: random_guid() with hyphens removed
|
String | Required |
32-character hexadecimal (UUID without hyphens)
|
Unique identifier for the specific API endpoint or task being executed (32-character hex string) |
b19441175deb100010085ba8525b4db7
|
— |
|
userAgent
Source: random_choice() from list of common Workday user agents
|
String | Required | — | User agent string identifying the Workday client application and version |
Workday/2025.12.1.27340 (iPhone)
|
Workday/2025.12.1.27340 (iPhone)
— Workday iOS mobile app
Workday/2025.12.0.25234 (AndroidNative)
— Workday Android mobile app
Workday/2025.11.2.26145 (iPhone)
— Workday iOS mobile app (older version)
|
|
sessionId
Source: random_string(6, 'abcdef0123456789')
|
String | Required |
6-character hexadecimal
|
Short session identifier (6-character hex string) |
91f19d
|
— |
|
taskDisplayName
Source: random_choice() from list of common Workday task names
|
String | Required | — | Human-readable description of the task or API endpoint being called |
peopleExperience/allMyHomePageCards/get (GET) (1 - )
|
— |
|
activityAction
Source: random_weighted(['READ', 'WRITE'], [95, 5]) - 95% READ, 5% WRITE
|
String | Required | — | Type of action performed (READ or WRITE for API requests) |
READ
|
READ
— Data retrieval or query operation
WRITE
— Data modification or creation operation
|
|
tenantId
Source: registry.get_organization_field('netbios_domain') | lower, fallback to 'acmecorp'
|
String | Required | — | Workday tenant identifier (organization's unique ID in Workday) |
acmeco
|
— |
|
tenantHost
Source: random_choice() from list of Workday service hostnames
|
String | Required |
Hostname (FQDN)
|
Workday service hostname for the tenant |
wd5-services1.myworkday.com
|
— |