Configuration Guide: Employee onboarding - Workday

Prerequisites

This library pack contains content from the following required expansion products:

Some of these products offer default access to their respective content and can still be used without expansion products.

Refer to the Nexthink Infinity thresholds and limits overview documentation for more information about default thresholds for expansion products.

Included content and dependencies

This library pack contains the following content and dependencies:

Type
Name
Description

Workflow

Employee onboarding - Workday

A customisable workflow to check pre-requistes on a new employee's device before launching a welcome campaign with a redirection to Workday to start the onboarding process.

Browser extension enforcement

This workflow is triggered from the Adopt guide 'Workday - Browser extension missing'. This configurable workflow verifies the default browser in use on a device, and then automatically install all corporate standard web extensions for that browser. A campaign confirms this operation to the employee, and an ITSM ticket is logged if this operation fails.

Workday - Login assistance

This workflow is triggered from the Adopt guide 'Workday - Login assistance'. This configurable workflow creates a support ticket and sends an email to the employee's manager to request access to Workday. This ensures quick resolution and keeps both IT and the manager informed without additional effort from the employee

Workday - Onboarding completion

This workflow is triggered from the Adopt guide 'Workday - Onboarding complete'. This configurable workflow simply sends an email to the employee's manager to confirm that they have completed their Workday onboarding.

Remote action

Get ZScaler status

This Remote Action provides information about the connectivity status of Zscaler.

Start ZScaler

Creates a scheduled task on the target system to start the Zscaler main service (ZSAService) in a given time provided by an input parameter.

Get default browser

Retrieves browser name that is configured as default.

Set Chrome plugins

This Remote Action enables administrators to centrally manage Google Chrome plugins by:

  • Installing a predefined set of plugins

  • Removing specified plugins

  • Clearing existing policies when needed

Set Firefox plugins

This Remote Action enables administrators to centrally manage Mozilla Firefox plugins by:

  • Installing a predefined set of plugins

  • Removing specified plugins

  • Clearing existing policies when needed

Set Microsoft Edge plugins

This Remote Action enables administrators to centrally manage Microsoft Edge plugins by:

  • Installing a predefined set of plugins

  • Removing specified plugins

  • Clearing existing policies when needed

Campaign

Onboarding - Zscaler authentication - workflow invoke

Asks the employee to (re)authenticate with ZScaler, with brief instructions.

Onboarding welcome - workflow invoke

Welcomes the employee to the organization and provides them with a link to Workday.

Browser extension installed

This campaign is designed to work with the library workflow 'Browser extension enforcement'

This campaign informs the employee that their missing browser extension has been installed

Adopt guides

Workday - Add or change emergency contacts

Gives new employees a simple, step-by-step process to add or modify their emergency contact details directly within their Workday profile.

Workday - Change home contact information

Provides new employees with a clear, step-by-step walkthrough to update their home address, phone number, and personal email within their Workday profile.

Workday - Change my email address

Gives new employees a simple, step-by-step process to review and update their email information in Workday.

Workday - Change my preferred name

Provides clear, step-by-step instructions to help new employees quickly update their preferred name in the Workday system.

Workday - Homepage navigation

An interactive, self-guided walkthrough designed to help new employees quickly become comfortable with the Workday homepage. By clearly explaining each core feature, it empowers users to work confidently, complete their responsibilities on time, and reduce onboarding friction.

Workday - Browser extension missing

Automatically detects when a required browser extension is not installed on an employee's device. When triggered, it launches a workflow that automatically installs all corporate-approved extensions, ensuring each device remains secure, compliant, and fully equipped.

Workday - Login assistance

automatically detects when a Workday login attempt has failed. When triggered, it launches a workflow that creates a support ticket and sends an email to the employee's manager to request the necessary access. This ensures quick resolution and keeps both IT and the manager informed without additional effort from the employee.

Workday - Onboarding comlete

Allows employees to easily confirm that they've finished their onboarding process. When launched, the guide triggers a workflow that automatically emails the employee's manager to let them know.

Configuring "Employee onboarding pack"

Adapt these suggested configuration steps to edit and customize content according to your organizational needs.

Follow these steps to install and configure content:

Step 1 - Configure remote action(s)

  1. From the main menu, navigate to the Remote Actions > Manage remote action page.

  2. Review and edit your remote actions.

Nexthink recommends the following configurations for these remote actions:

Name
Trigger
Parameters to edit

Get Zscaler status

Triggered by the workflow

Start Zscaler

Triggered by the workflow

  • TaskSchedulerTimeDelay

  • StartZscalerScheduledCampaignID (Tick the checkbox for "Allow the user to enter a custom value")

Step 2 - Edit campaigns

  1. From the main menu, navigate to the Campaigns > Manage Campaigns page.

  2. Review and edit your campaigns. For each installed campaign:

    • Customize the sender name and image.

    • Review and adjust questions.

    • Publish the campaign when you are ready to use it.

Nexthink recommends the following configurations for these campaigns:

Campaign name
Campaign NQL ID
Description

Onboarding - Zscaler authentication - workflow invoke

zscaler_authentication

Asks the employee to (re)authenticate with ZScaler, with brief instructions.

Onboarding welcome - workflow invoke

onboarding_welcome

Welcomes the employee to the organization and provides them with a link to Workday.

Step 3 - Configure ITSM API connector credentials

The configuration of connector credentials is essential for enabling API calls.

  1. From the main menu, navigate to the Administration > Connector credentials page.

  2. Choose the HTTPS option from the Protocol drop-down.

  3. Paste the root https:// of the ITSM into the URL address field.

  4. Choose the Basic option from the Authorization drop-down.

  5. Enter a Username and Password to connect to the third-party tool.

  6. Save the credential.

Connector credential.png

After configuring the connector credential for the ITSM API:

  1. From the specific workflow, fill in each Service/API thinklet dropdown field for Credentials.

    • When the workflow is installed or copied from the Library, this field will be blank as it is a local setup of each environment and is not included in the Library.

image-20240119-144723.png

Step 4 - Configure Microsoft Teams communication channel

This workflow uses Microsoft Teams messages as the communication channel with end users, which is called a Message thinklet. To learn more about the Message thinklet, see the documentation.

For the Message thinklets to work correctly in this workflow, please complete the configuration steps described on this documentation page.

Step 5 - Set up a registered Microsoft Entra ID app and configure Microsoft Graph API connector credentials

Refer to the following documentation page to register the Microsoft Entra ID application and configure the appropriate connector credentials in Nexthink: Entra ID integration for workflows.

For this workflow, the registered Entra ID application must be granted the following permissions:

Permission type
Least privileged permissions

Application or Delegated

User.Read.All Directory.Read.All Mail.Send

This workflow has been tested using the Application permission type. Different environments require different permissions. You should assign permissions according to your environment and know the risks involved.

Refer to the Graph REST API documentation from Microsoft for more information.

Step 6 - Configure guides

  1. From the main menu, navigate to the Applications > Manage adoption guides page.

  1. The installed guides will be unattached.

  2. Select a guide, and using the menu, choose "Attach to an application"

  1. Choose your application from the list, and click OK

  1. By default, your installed guide will be in draft mode.

  2. You are free to edit the guide, change the description and assign key page restrictions if required.

  3. Once the guide settings are complete, you can publish the guide

  1. Your guide will now be available in the Context help menu


RELATED TOPICS

Last updated

Was this helpful?