How to Synchronize Workday Employee Accounts with Microsoft 365
Question details
Organizations need to automate the creation of Microsoft 365 accounts for new employees in Workday and disable accounts when employees leave the company.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Automating IT onboarding and offboarding processes for organization employees.
- Observed behavior
- Employee accounts must be dynamically provisioned upon hiring and deprovisioned upon termination using an internal data center or Workday integration.
Ensure you have Global Administrator permissions in Microsoft Entra ID and possess the necessary API credentials and administrative access in your Workday environment.
Use Microsoft Entra ID for Automated Provisioning
Implement Microsoft Entra ID (formerly Azure AD) to automatically sync and manage user life cycles between Workday and Microsoft 365.
Microsoft Entra ID allows organizations to seamlessly automate user provisioning and deprovisioning. By integrating Workday directly, or via an on-premises directory, you ensure that Microsoft 365 accounts accurately reflect the current HR employment status.
Outline the specific user attributes, access levels, and timing required when an employee joins, moves within, or leaves the organization in Workday.
For cloud-only environments, configure direct Workday provisioning through a supported integration or SCIM. For hybrid environments, use Microsoft Entra Connect to synchronize your on-premises directory with Microsoft Entra ID.
In the Microsoft Entra admin center, navigate to Enterprise Applications, add the Workday provisioning app, and enter your Workday tenant URL alongside your administrator credentials.
Map Workday fields (such as name, department, and job title) to their corresponding Microsoft Entra attributes, then turn on the provisioning status to begin syncing accounts to Microsoft 365.

Equip Your Employees with WPS Office
While managing user accounts and IT infrastructure, consider providing your employees with WPS Office. It is a lightweight, cost-effective alternative to Microsoft 365 that offers a familiar interface and comprehensive document editing capabilities without heavy enterprise licensing fees.
- 1. Download the installer: Visit the official WPS website and download the free WPS Office installer for your target operating systems.
- 2. Install and deploy: Run the setup file to install the suite on employee workstations or deploy it in bulk via your organization's device management system.
- 3. Open existing documents: Launch WPS Office and instantly open existing Word, Excel, and PowerPoint files with full formatting retention.

Frequently Asked Questions
Can I use SCIM to connect Workday and Microsoft 365?
Yes, Microsoft Entra ID supports SCIM (System for Cross-domain Identity Management) to enable direct and automated user provisioning from HR systems like Workday to Microsoft 365.
What happens to Microsoft 365 accounts when an employee leaves in Workday?
When the employee's status changes to terminated in Workday, the integration automatically triggers a deprovisioning event in Microsoft Entra ID, which disables the user's Microsoft 365 account and revokes system access.
Do I need Microsoft Entra Connect if I only use cloud services?
No. If your organization is fully cloud-based, you can use the direct Workday to Microsoft Entra ID provisioning application. Microsoft Entra Connect is only necessary if you need to synchronize an on-premises Active Directory.




