wdops for Workday · Snowflake Native App
Extract any Workday operation into Snowflake tables. Submit records back from tables, uploads or dropped files. Fix what Workday rejects, in place. Reconcile every record and every line. All of it inside your own Snowflake account.
What it does
Every Workday integration ends up doing the same four things. wdops does them from one place, with every record accounted for from the row it started as to the Workday ID it got.
01Extract
Pick a business object and it lands as tables with history: one row per record, one table per line, references as ID, WID and name. Ready-made views collapse references and unnest worktags, addresses and attachments, so analysts start from a relational model, not XML. Incremental windows, highwater marks, retention and a schedule you write in plain JSON.
02Submit
Write rows with SQL, dbt or Snowpipe, drop a CSV or workbook on the app's inbox, or upload a file on the page. Every path meets the same staging tables and the same checks. The app decides per batch whether to go one record at a time for an immediate answer or through Workday's bulk import, and reads every accepted record back to confirm it.
03Correct
A validation fault from Workday names an XPath. wdops maps it back through the operation's spec to the table, row and column, so the owner of the record sees the cell to fix. Fix a handful in the grid, or download the rejected records as a workbook, correct them and upload it. The original is superseded and linked; nothing is lost.
04Reconcile
Every submit is paired with the extract that reads it back. A reconciliation view matches each record by its Workday ID and classifies it as confirmed, not yet extracted, missing or drifted; a second view matches every line by position and names the columns that differ. Month end has a query, not a spreadsheet.
Coverage
The app ships with every public Workday SOAP web service, generated from Workday's own WSDLs and documentation. Switch on the web services your tenant uses, then the business objects. Nothing is loaded until you switch it on.
Three ways in
A pipeline, a file share and a person with a spreadsheet all feed the same staging tables and go through the same rules. There is one set of checks to learn and one History page where everything shows up.
SQL
Insert into the business object's staging tables from SQL, dbt, Snowpipe or a stream. The heartbeat batches, checks and submits them on the schedule you set.
INSERT INTO DATA.OUT_JOURNAL_ACCOUNTING_JOURNAL_DATA
(SRC_REF_ID, ACCOUNTING_DATE, COMPANY_REFERENCE_COMPANY_REFERENCE_ID, ...)
SELECT ...;FILE
Put a CSV or workbook on the app's stage under the business object's folder. The folder is the whole contract. A result file is written back beside it with one row per record.
PUT file://journals.xlsx
@DATA.WD_INBOX/Financial_Management/Journals/;UPLOAD
Pick the business object, download its template, upload the file. The batch is checked at once and opens in History with every record's outcome.
No SQL, no stage, no Workday login.
Who it is for
Large employers with many companies, agencies or departments feeding one tenant. Each group sees its own records; the engineers see everything; the Workday administrator gets an exact list of what to grant.
Data engineers
Switch business objects on, set schedules and retention, write rules, feed staging tables from pipelines and read the extracts through views. The app tunes page sizes and parallelism itself, within the ceilings you set.
Accountants and analysts
Two pages for most people: upload a file, then see what needs them and what ran. Scope keeps every user inside the companies they are entitled to, and entitlements can follow Workday role assignments.
Workday administrators
For every operation switched on, the app lists the securable item, domain and business process policy to grant, in order, and tests each one without creating anything in the tenant.
Security
wdops is a Snowflake Native App. It runs inside your Snowflake account, keeps its tables in its own schema and reaches exactly one host: your Workday tenant, through a network rule and an external access integration you create. Credentials live in a Snowflake secret you own. The vendor has no access to your data, your credentials or your connection, and nothing is sent anywhere else.
Two application roles separate the engineers from everyone else. Within the app, entitlements say which companies a user may submit for and see. Every request and response is kept per record, redacted of credentials, for as long as you choose.
How you get it
01
From the Snowflake Marketplace into your account. One install per Workday tenant.
02
Snowsight asks for two references: network access to your Workday host and a secret with the integration user's credentials. The app says how to create both.
03
Tick a business object. Its tables and views appear, the Workday grants it needs are listed, and a test proves each one.
Bring your tenant and an integration user.
Documentation
The whole guide is public: what the app does, how records move, what every error code means, what your Workday administrator has to grant and how to run it day to day.
Start here
Install from the Marketplace, connect your tenant, switch on the first business object.
Start here
Overview, Operations, Upload, History, Reconcile and Admin, and who sees what.
Start here
Web services, business objects, records, lines and attributes, scope, schedules, retention.
Using the app
Three paths in (SQL, file drop, upload), one set of checks, one record at a time or Workday's import.
Using the app
Extracts into tables with history and ready-to-query views, on a schedule or on demand.
Using the app
Checks before anything is sent, Workday's own messages mapped to the cell, and what every code means.
Using the app
Fix rejected records in the app or in a spreadsheet and submit them again, with the trail kept.
Using the app
Every submitted record confirmed against the extract by Workday ID, and every line by position.
Running it
What the integration user needs, step by step, with a test per operation that creates nothing.
Running it
Everything stays in your Snowflake account and your Workday tenant. Roles, scope and entitlements.
Running it
The heartbeat, compute, stuck runs, imports in flight, tuning, and a new Workday release.
Workday is a trademark of Workday, Inc. wdops is an independent product of WAG Consulting and is not affiliated with, endorsed by or sponsored by Workday. Snowflake is a trademark of Snowflake Inc.