Workday: Create ticket in onsite JIRA

[Stian Bentsen Sveen]

We are gonna start using WorkDay HCM in our business and one of the things we wanted to automate was creation of tickets for onboarding / offboarding / change of position to IT. I have played around with the REST API a bit, so I have everything OK on that side.

Our problem now is that WorkDay is a cloud solution whereas we are hosting an on premise JIRA. We have access to JIRA externally via Azure Application Proxy, but that requires interactive logon with Azure and MFA, but for WorkDay they would obviously need some way of non-interactively getting access to our on prem JIRA to POST via REST API.

Are we going about this the wrong way?

[Jimmy Van (GLiNTECH) · Accepted solution]

Hi Stian, everything sounds fine so far.

You're probably going to need to create Workday as an OAuth consumer. Try the following documents:

https://confluence.atlassian.com/jiracoreserver/allowing-oauth-access-939937946.html

https://developer.atlassian.com/server/jira/platform/oauth/

[Stian Bentsen Sveen]

Hi Jimmy,

Thanks for you reply!

We have solved the Azure authentication part, so if we get OAuth working, this should be peachy.

All of this is pretty new to me so thanks for the push in the right direction!

Br,

Stian

[Jimmy Van (GLiNTECH)]

Great news, keep us posted if you need any further guidance :)

[Andy Meza]

@Stian Bentsen Sveen Were you able to get this solution to work?

[Stian Bentsen Sveen]

@Andy Meza Hi, no, unfortunately not. Due to time restrictions because of business pushing on the go live date, we had to go live with another option since the "IT part" of this was not as important as the business needs.

We ended up doing simple email integration. Workday will gather up all new hires / change of position / terminate employee requests and then at 19:00 it will trigger an email for each of these requests and they end up in JIRA.

On the JIRA side I have automations picking up these tickets, but since all emails to our servicedesk come in as incidents, I have to clone the original ticket with a new issue type as "Service Request" and then delete the original.

We havent gotten around to this yet, but now we have Azure API management, so you should be able to solve it that way.

With Azure API management you dont need to think about how WorkDay will authenticate and get access to JIRA.

You get access to the APIs by sending your requests to the Azure API endpoint and then Azure sends that to your on prem JIRA and sends the response back, so no need to expose JIRA itself to the outside.

https://azure.microsoft.com/en-us/services/api-management/

Br,

Stian

[Courtney Goebel]

@Stian Bentsen Sveen  - we actually have the same need to send a notification to Jira from Workday when someone terminates.  Was this working ok for you?  I’m on the Workday side so not sure how the Jira side will work.