# Configuration Guide: Employee onboarding - Workday

{% hint style="warning" %}
The configuration options on this page are only accessible to [administrators](https://docs.nexthink.com/platform/user-guide/administration/account-management/roles#roles-administration).

Refer to the [Usage guide: Employee onboarding - Workday](https://docs.nexthink.com/platform/library-packs/security-and-compliance/workflow-employee-onboarding-workday/usage-guide-employee-onboarding-workday) to use library content as a standard user.
{% endhint %}

## **Prerequisites** <a href="#documentation-pre-requisites" id="documentation-pre-requisites"></a>

This library pack contains content from the following required [expansion products](https://docs.nexthink.com/platform/overview/products):

* [Employee Engagement - Campaigns](https://docs.nexthink.com/platform/user-guide/campaigns)
* [Adopt - User guides](https://docs.nexthink.com/platform/user-guide/adopt)
* [Flow - Workflows](https://docs.nexthink.com/platform/overview/products#products-flow)

{% hint style="info" %}
Some of these products offer default access to their respective content and can still be used without [expansion products](https://docs.nexthink.com/platform/overview/products).

Refer to the [Nexthink Infinity thresholds and limits overview](https://edocs.nexthink.com/nexthink-infinity/infinity-specifications/nexthink-infinity-default-thresholds-overview) documentation for more information about default thresholds for expansion products.
{% endhint %}

## **Included content and dependencies** <a href="#documentation-contentanddependencies" id="documentation-contentanddependencies"></a>

This library pack contains the following content and dependencies:

| Type                                             | Name                                                  | Description                                                                                                                                                                                                                                                                                                                                                         |
| ------------------------------------------------ | ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Workflow                                         | Employee onboarding - Workday                         | A customisable workflow to check pre-requistes on a new employee's device before launching a welcome campaign with a redirection to Workday to start the onboarding process.                                                                                                                                                                                        |
|                                                  | Browser extension enforcement                         | This workflow is triggered from the Adopt guide 'Workday - Browser extension missing'. This configurable workflow verifies the default browser in use on a device, and then automatically install all corporate standard web extensions for that browser. A campaign confirms this operation to the employee, and an ITSM ticket is logged if this operation fails. |
|                                                  | Workday - Login assistance                            | This workflow is triggered from the Adopt guide 'Workday - Login assistance'. This configurable workflow creates a support ticket and sends an email to the employee's manager to request access to Workday. This ensures quick resolution and keeps both IT and the manager informed without additional effort from the employee                                   |
|                                                  | Workday - Onboarding completion                       | This workflow is triggered from the Adopt guide 'Workday - Onboarding complete'. This configurable workflow simply sends an email to the employee's manager to confirm that they have completed their Workday onboarding.                                                                                                                                           |
| Remote action                                    | Get ZScaler status                                    | This Remote Action provides information about the connectivity status of Zscaler.                                                                                                                                                                                                                                                                                   |
|                                                  | Start ZScaler                                         | Creates a scheduled task on the target system to start the Zscaler main service (ZSAService) in a given time provided by an input parameter.                                                                                                                                                                                                                        |
|                                                  | Get default browser                                   | Retrieves browser name that is configured as default.                                                                                                                                                                                                                                                                                                               |
|                                                  | Set Chrome plugins                                    | <p>This Remote Action enables administrators to centrally manage Google Chrome  plugins by:</p><ul><li>Installing a predefined set of plugins</li><li>                                                                                                                                                                                                              |
| Removing specified plugins</li><li>              |                                                       |                                                                                                                                                                                                                                                                                                                                                                     |
| Clearing existing policies when needed</li></ul> |                                                       |                                                                                                                                                                                                                                                                                                                                                                     |
|                                                  | Set Firefox plugins                                   | <p></p><p>This Remote Action enables administrators to centrally manage Mozilla Firefox plugins by:</p><ul><li>Installing a predefined set of plugins</li><li>                                                                                                                                                                                                      |
| Removing specified plugins</li><li>              |                                                       |                                                                                                                                                                                                                                                                                                                                                                     |
| Clearing existing policies when needed</li></ul> |                                                       |                                                                                                                                                                                                                                                                                                                                                                     |
|                                                  | Set Microsoft Edge plugins                            | <p></p><p>This Remote Action enables administrators to centrally manage Microsoft Edge plugins by:</p><ul><li>Installing a predefined set of plugins</li><li>                                                                                                                                                                                                       |
| Removing specified plugins</li><li>              |                                                       |                                                                                                                                                                                                                                                                                                                                                                     |
| Clearing existing policies when needed</li></ul> |                                                       |                                                                                                                                                                                                                                                                                                                                                                     |
| Campaign                                         | Onboarding - Zscaler authentication - workflow invoke | Asks the employee to (re)authenticate with ZScaler, with brief instructions.                                                                                                                                                                                                                                                                                        |
|                                                  | Onboarding welcome - workflow invoke                  | Welcomes the employee to the organization and provides them with a link to Workday.                                                                                                                                                                                                                                                                                 |
|                                                  | Browser extension installed                           | <p>This campaign is designed to work with the library workflow 'Browser extension enforcement'</p><p>This campaign informs the employee that their missing browser extension has been installed</p>                                                                                                                                                                 |
| Adopt guides                                     | Workday - Add or change emergency contacts            | Gives new employees a simple, step-by-step process to add or modify their emergency contact details directly within their Workday profile.                                                                                                                                                                                                                          |
|                                                  | Workday - Change home contact information             | Provides new employees with a clear, step-by-step walkthrough to update their home address, phone number, and personal email within their Workday profile.                                                                                                                                                                                                          |
|                                                  | Workday - Change my email address                     | Gives new employees a simple, step-by-step process to review and update their email information in Workday.                                                                                                                                                                                                                                                         |
|                                                  | Workday - Change my preferred name                    | Provides clear, step-by-step instructions to help new employees quickly update their preferred name in the Workday system.                                                                                                                                                                                                                                          |
|                                                  | Workday - Homepage navigation                         | An interactive, self-guided walkthrough designed to help new employees quickly become comfortable with the Workday homepage. By clearly explaining each core feature, it empowers users to work confidently, complete their responsibilities on time, and reduce onboarding friction.                                                                               |
|                                                  | Workday - Browser extension missing                   | Automatically detects when a required browser extension is not installed on an employee's device. When triggered, it launches a workflow that automatically installs all corporate-approved extensions, ensuring each device remains secure, compliant, and fully equipped.                                                                                         |
|                                                  | Workday - Login assistance                            | automatically detects when a Workday login attempt has failed. When triggered, it launches a workflow that creates a support ticket and sends an email to the employee's manager to request the necessary access. This ensures quick resolution and keeps both IT and the manager informed without additional effort from the employee.                             |
|                                                  | Workday - Onboarding comlete                          | Allows employees to easily confirm that they've finished their onboarding process. When launched, the guide triggers a workflow that automatically emails the employee's manager to let them know.                                                                                                                                                                  |

## **Configuring "Employee onboarding pack"** <a href="#documentation-configurationguide" id="documentation-configurationguide"></a>

{% hint style="info" %}
Adapt these suggested configuration steps to edit and customize content according to your organizational needs.
{% endhint %}

Follow these steps to install and configure content:

* Before configuration - Install library pack content from [Nexthink Library](https://docs.nexthink.com/platform/user-guide/nexthink-library)
* [Step 1 - Configure remote action(s)](#configuring-remote-action-s)
* [Step 2 - Edit campaigns](#documentation-step3-editcampaigns)
* [Step 3 - Configure ITSM API connector credentials](#configurationguide-batteryreplacementscheduling-step2-configureitsmapiconnectorcredentials)
* [Step 4 - Configure Microsoft Teams communication channel](#step-2-set-up-a-registered-microsoft-entra-id-app-and-configure-microsoft-graph-api-connector-creden)
* [Step 5 - Set up a registered Microsoft Entra ID app and configure Microsoft Graph API connector credentials](#step-2-set-up-a-registered-microsoft-entra-id-app-and-configure-microsoft-graph-api-connector-creden-1)
* [Step 6 - Configure Adopt guides](#step-6-configure-guides)

### **Step 1 - Configure remote action(s)**

1. From the main menu, navigate to the **Remote Actions** > [Manage remote action ](https://docs.nexthink.com/platform/user-guide/remote-actions/managing-remote-actions)page.
2. Review and edit your remote actions.

Nexthink recommends the following configurations for these remote actions:

<table><thead><tr><th width="163">Name</th><th width="238">Trigger</th><th>Parameters to edit</th></tr></thead><tbody><tr><td>Get Zscaler status</td><td>Triggered by the workflow</td><td></td></tr><tr><td>Start Zscaler</td><td>Triggered by the workflow</td><td><ul><li>TaskSchedulerTimeDelay</li><li>StartZscalerScheduledCampaignID<br>(Tick the checkbox for "Allow the user to enter a custom value")</li></ul></td></tr></tbody></table>

### **Step 2 - Edit campaigns** <a href="#documentation-step3-editcampaigns" id="documentation-step3-editcampaigns"></a>

1. From the main menu, navigate to the **Campaigns** > [Manage Campaigns](https://docs.nexthink.com/platform/user-guide/campaigns/managing-campaigns) page.
2. Review and edit your campaigns. For each installed campaign:
   * Customize the sender name and image.
   * Review and adjust questions.
   * Publish the campaign when you are ready to use it.

Nexthink recommends the following configurations for these campaigns:

| Campaign name                                         | Campaign NQL ID         | Description                                                                         |
| ----------------------------------------------------- | ----------------------- | ----------------------------------------------------------------------------------- |
| Onboarding - Zscaler authentication - workflow invoke | zscaler\_authentication | Asks the employee to (re)authenticate with ZScaler, with brief instructions.        |
| Onboarding welcome - workflow invoke                  | onboarding\_welcome     | Welcomes the employee to the organization and provides them with a link to Workday. |

### Step 3 - Configure ITSM API connector credentials <a href="#configurationguide-batteryreplacementscheduling-step2-configureitsmapiconnectorcredentials" id="configurationguide-batteryreplacementscheduling-step2-configureitsmapiconnectorcredentials"></a>

The configuration of [connector credentials](https://docs.nexthink.com/platform/integrations/outbound-connectors/connector-credentials) is essential for enabling API calls.

1. From the main menu, navigate to the **Administration** > [Connector credentials](https://docs.nexthink.com/platform/integrations/outbound-connectors/connector-credentials) page.
2. Choose the **HTTPS** option from the **Protocol** drop-down.
3. Paste the root `https://` of the ITSM into the **URL address** field.
4. Choose the **Basic** option from the **Authorization** drop-down.
5. Enter a **Username** and **Password** to connect to the third-party tool.
6. **Save** the credential.

<div data-full-width="true"><figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-7bc5e1898e0304f93b6e2963e951c3543d50f743%2Fconnector-credential.png?alt=media" alt="Connector credential.png" width="375"><figcaption></figcaption></figure></div>

After configuring the connector credential for the ITSM API:

7. From the specific workflow, fill in each **Service/API** thinklet dropdown field for **Credentials**.
   * When the workflow is installed or copied from the Library, this field will be blank as it is a local setup of each environment and is not included in the Library.

<div data-full-width="true"><figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-90daae14368007cc94d46fe3224c401d495cfd5b%2Fimage-20240119-144723.png?alt=media" alt="image-20240119-144723.png" width="760"><figcaption></figcaption></figure></div>

### Step 4 - Configure Microsoft Teams communication channel <a href="#step-2-set-up-a-registered-microsoft-entra-id-app-and-configure-microsoft-graph-api-connector-creden" id="step-2-set-up-a-registered-microsoft-entra-id-app-and-configure-microsoft-graph-api-connector-creden"></a>

This workflow uses Microsoft Teams messages as the communication channel with end users, which is called a Message thinklet. To learn more about the Message thinklet, see the [documentation](https://docs.nexthink.com/platform/user-guide/workflows/creating-workflows/configuring-thinklets/message-thinklet).

For the Message thinklets to work correctly in this workflow, please complete the configuration steps described on [this documentation page](https://docs.nexthink.com/platform/integrations/communication-channels).

### Step 5 - Set up a registered Microsoft Entra ID app and configure Microsoft Graph API connector credentials <a href="#step-2-set-up-a-registered-microsoft-entra-id-app-and-configure-microsoft-graph-api-connector-creden" id="step-2-set-up-a-registered-microsoft-entra-id-app-and-configure-microsoft-graph-api-connector-creden"></a>

Refer to the following documentation page to register the Microsoft Entra ID application and configure the appropriate connector credentials in Nexthink: [Entra ID integration for workflows](https://docs.nexthink.com/platform/library-packs/faq/entra-id-integration-for-workflows).

For this workflow, the registered Entra ID application must be granted the following permissions:

| Permission type          | Least privileged permissions                            |
| ------------------------ | ------------------------------------------------------- |
| Application or Delegated | <p>User.Read.All<br>Directory.Read.All<br>Mail.Send</p> |

This workflow has been tested using the Application permission type. Different environments require different permissions. You should assign permissions according to your environment and know the risks involved.

Refer to the [Graph REST API](https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0) documentation from Microsoft for more information.

### **Step 6 - Configure guides**&#x20;

1. From the main menu, navigate to the **Applications** > [Manage adoption guides ](https://docs.nexthink.com/platform/user-guide/adopt/guide-creation-and-management-from-nexthink-applications/managing-guides)page.

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-5c25375e82feb2956f164a9136d87717436d1b57%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

2. The installed guides will be unattached.&#x20;
3. Select a guide, and using the menu, choose "Attach to an application"

![](https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-7a33cec01f81d4723d74c37ba6193ae7167de1a8%2Fimage.png?alt=media)&#x20;

4. Choose your application from the list, and click OK

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-242340fa636b53b5b791f0cf98523226df18ba88%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

5. By default, your installed guide will be in draft mode.&#x20;
6. You are free to edit the guide, change the description and assign key page restrictions if required.
7. Once the guide settings are complete, you can publish the guide

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-4a7908b35a46c971a6485b400a3a55188c385fac%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

8. Your guide will now be available in the Context help menu

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-6fe3da5555d7900e8d9121495869b2f3102c88c8%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

***

RELATED TOPICS

* [Overview page: Employee onboarding - Workday](https://docs.nexthink.com/platform/library-packs/security-and-compliance/workflow-employee-onboarding-workday)
* [Usage guide: Employee onboarding - Workday](https://docs.nexthink.com/platform/library-packs/security-and-compliance/workflow-employee-onboarding-workday/usage-guide-employee-onboarding-workday)