Usage guide: Employee onboarding - Workday
This page outlines various ways to use the pack, including use case examples.
Administrators can refer to the Configuration guide : Employee onboarding -Workday to set up and customize the installed content.
The Employee onboarding - Workday library pack enables EUC teams to:
Check device connectivity and employee authentication with the corporate VPN solution.
Redirect the employee to the correct HR portal to start the onboarding process.
Guide the employee through the onboarding process using a separately configured ADOPT guide.
Update an ITSM ticket if VPN issues are discovered.
In addition, this library pack offers preconfigured remote actions, self-healing, and campaigns to take action and drive awareness.
Library pack uses
Use the library pack content for the following purposes.
Visibility
The Employee onboarding - Workday workflow is the starting point of this library pack. It will be launched on devices of new employees as part of their onboarding process.
Use cases
In addition to the relevant use cases covered below, you may uncover other troubleshooting scenarios specific to your environment.
Check employee authentication to the corporate VPN
Before the employee can start their onboarding process through the HR portal, it is essential to ensure that the VPN application on their device is configured correctly and that they have authenticated successfully. If authentication issues are detected, the workflow will guide them through the authentication process, and an ITSM ticket will be created if this cannot be resolved.
The remote action "Get ZScaler status" is run on the device to check whether ZScaler is running.
If not, the remote action "Start ZScaler" is run on the device.
After a short delay, this check is repeated. If ZScaler could not be started, then an ITSM ticket is created, and the workflow terminates.

If ZScaler is running correctly, the output of "Get ZScaler status" is checked again.
If ZScaler errors are detected, the ITSM ticket is updated, and the workflow terminates.
If ZScaler is not authenticated, a campaign is launched and the employee is asked to re-authenticate. If they request assistance, an ITSM ticket is created, and the workflow terminates.
If they confirm that they have authenticated, the workflow will check the ZScaler status once more.
If they are still not authenticated, an ITSM ticket is created, and the workflow terminates.
If authentication is successful, the workflow continues.

Start employee onboarding
After ensuring that the employee's device is functioning properly and that they are authenticated with the VPN, the onboarding process can now begin. This involves redirecting the employee to the HR portal.
It has been confirmed that the employee is authenticated correctly with the VPN.
A welcome campaign is sent to the employee inviting them to visit the HR portal (in this case, Workday) to complete the onboarding process.
The campaign's status is checked. If the employee cancelled the campaign, an ITSM ticket is created advising that the Workday registration may not be complete. The workflow will then terminate.
If the campaign was answered fully, it is assumed that the employee followed the link to Workday.
An Entra ID request is made to determine the employee's manager.
An MS Teams message is then sent to their manager to inform them that their onboarding introduction is complete.
The workflow terminates.

RELATED TOPICS
Last updated
Was this helpful?