Workday Connector Release Notes

This connector is now compatible with Java 17 only.

The connector now uses Workday API v47.0 instead of v46.0. Workday removes three operation choices from the Financial Management and Compensation services. Service-specific connector operations remain available. Review the required migrations in Removed Workday Operations. Workday-deprecated operation choices remain available. See Workday-Deprecated Operations when planning replacements. For more information, see Financial Management and Compensation.

Workday API v47.0 adds 51 operation choices across 15 existing service components. Select the service component and choose the API operation in its Operation field. These choices aren’t new dedicated connector components. See Added Workday Operations for the complete list and links to the service reference sections.

The SOAP engine is upgraded to version 3.0.3. Test SOAP requests, response mappings, and authentication before deploying to production.

Timeout unit XML attributes are renamed: responseTimeoutUnit is now responseTimeoutTimeUnit, connectionTimeoutUnit is now connectionTimeoutTimeUnit, and connectionIdleTimeoutUnit is now connectionIdleTimeoutTimeUnit. The Response Timeout default remains 60 seconds, and the Connection Timeout and Connection Idle Timeout defaults remain 30 seconds. For migration steps, see Configuration Migration. For more information, see Configuration and Workday Basic Authentication Connection Type.

The Signature Algorithm for X.509 authentication now supports only RSA_SHA256, which replaces the previous RSA_SHA1 default. Custom SOAP headers are now sent and included in the signed envelope. The header input must have a headers root element. For more information, see X.509 Authentication Connection Type.

The OAuth State field is now labeled OAuth State. The X.509 Type, Password, and Alias fields are now labeled Key Store Type, Key Store Password, and Key Alias. Their XML attribute names are unchanged. For more information, see Workday OAuth Code Authentication Connection Type and X.509 Authentication Connection Type.

Host name now accepts only a hostname with an optional port. Values containing a URL scheme, user information, path, query, fragment, or spaces are rejected. Tenant names are URL-encoded in service addresses, and user and tenant values are XML-escaped in SOAP requests. For more information, see Workday Basic Authentication Connection Type, Workday OAuth Code Authentication Connection Type, and X.509 Authentication Connection Type.

Content and Headers for SOAP operations now use the Any type, instead of Binary. Operations also expose Encoding to override the configuration encoding and Error Mappings to map connector errors. For more information, see the Workday Connector Reference and Error Mapping.

Authentication faults on Basic and X.509 connections now raise WORKDAY:UNAUTHORIZED. Authorization and invalid-ID validation faults can raise WORKDAY:INSUFFICIENT_PRIVILEGES and WORKDAY:NOT_FOUND. Transport failures raise WORKDAY:CONNECTIVITY, and request timeouts raise WORKDAY:TIMEOUT. Review error handlers and reconnection behavior in Understand Commonly Thrown Exceptions.

The new WORKDAY:SERVICE_UNAVAILABLE error is a child of WORKDAY:CONNECTIVITY. HTTP 429 and 503 responses map to this error internally and can surface as WORKDAY:CONNECTIVITY after runtime retries. For more information, see Understand Commonly Thrown Exceptions.

Object Type on the On Modified Objects source is now an enumeration instead of a string. The supported object types are unchanged. For more information, see On Modified Objects.

Watermark Enabled on the On Modified Objects source now defaults to true. After a restart, a stored watermark takes precedence over Updated From. Watermarks now represent the end of the polling window instead of the time a record was emitted. For more information, see On Modified Objects.

The On Modified Objects source now uses the same time bounds for every page in a poll. With watermarks enabled, a window limited by maxItemsPerPoll is fetched again on subsequent polls so Mule can filter previously emitted records. Invalid Updated From or Time Zone values now fail at source startup with WORKDAY:VALIDATION_ERROR. Review replay and restart considerations in Polling Migration. For more information, see On Modified Objects.

The SoapAttributes class moves from com.mulesoft.connector.workday.extension.api to com.mulesoft.connector.workday.extension.api.attributes. The class is now immutable and adds Status Code and Reason Phrase. Algorithm and keystore parameter classes move to com.mulesoft.connector.workday.extension.api.parameter. Update custom Java imports and DataWeave references. For more information, see SOAP Attributes.

Transport Headers in SOAP response attributes now preserve case-insensitive header lookup. For more information, see SOAP Attributes.

SOAP debug logging now redacts password, binary security token, and signature values. Other payload data and custom headers can still contain sensitive information. Enable debug logging only when necessary and restrict access to the logs.

The connector no longer depends on the REST SDK commons library.

Workday Connector now supports Workday API v46.0.

In the x.509 Authentication connection type, the Key store path field now includes BCFKS.

The connector now supports the Workday OAuth Code Authentication Connection connection type to seamlessly integrate with OAuth2-compliant authorization servers. For more information, refer to Workday OAuth Code Authentication Connection Type.

The connector now supports the Unauthorize operation. For more information, refer to Unauthorize.

This connector is now FIPS 140-2 compliant.

This connector is now compatible with Java 17.

The com.google.guava library is upgraded to version 32.0.0-jre.

The org.jetbrains.kotlin library is upgraded to version 1.7.10.

The org.apache.santuario:xmlsec library is upgraded to version 2.2.6.

The org.bouncycastle:bcprov-jdk18on library is now removed.

The connector is upgraded to Workday API version 40.0.

The connector now supports the ACA Partner Integrations and Student Transfer Credit operations.

The connector now throws the new WORKDAY:BAD_REQUEST error.

The com.fasterxml.jackson.core library is upgraded to version 2.15.0 to address reported security vulnerabilities.

The mule-soap-engine library is upgraded to version 1.7.2 to address reported security vulnerabilities.

The org-springframework library is upgraded to version 5.3.27 to address reported security vulnerabilities.

Upgraded the Workday API to 37.0.

Added the Drive, Metadata Translations, and Org Studio operations.

Added the ability to include headers in requests.

Salesforce Help

MuleSoft Services

Known Issues