Workday Security

Workday User Activity Logging API

REST API for retrieving user activity logs and signon data from a Workday tenant. Returns detailed JSON records of user actions including task information, timestamps, IP addresses, activity actions, system accounts, and session identifiers. Used by SIEM platforms for security monitoring.

GitHub

Documentation

📖
Documentation
https://doc.workday.com/admin-guide/en-us/integrations/workday-rest-api/rest-api-guides/user-activity-logging-rest-api/mhr1626995534900.html
📖
Authentication
https://doc.workday.com/admin-guide/en-us/workday-rest-api/workday-rest-api-authentication.html

API entry from apis.yml

apis.yml Raw ↑ 
name: Workday User Activity Logging API
description: REST API for retrieving user activity logs and signon data from a Workday tenant. Returns
  detailed JSON records of user actions including task information, timestamps, IP addresses, activity
  actions, system accounts, and session identifiers. Used by SIEM platforms for security monitoring.
image: https://www.workday.com/content/dam/web/images/icons/wd-icon.png
humanURL: https://doc.workday.com/admin-guide/en-us/integrations/workday-rest-api/rest-api-guides/user-activity-logging-rest-api/mhr1626995534900.html
baseURL: https://wd2-impl-services1.workday.com/ccx/api/privacy/v1/
tags:
- Activity Logging
- Audit
- Security
- SIEM
- Signons
properties:
- type: Documentation
  url: https://doc.workday.com/admin-guide/en-us/integrations/workday-rest-api/rest-api-guides/user-activity-logging-rest-api/mhr1626995534900.html
- type: Authentication
  url: https://doc.workday.com/admin-guide/en-us/workday-rest-api/workday-rest-api-authentication.html
contact:
- FN: Workday Support
  email: [email protected]
  url: https://community.workday.com