Workday to Azure Provisioning Automation
Budget: $250 – $750 USD
I’m looking to automate the full user-lifecycle between Workday and Azure AD so that every hire, role change, or termination reflected in Workday instantly updates access permissions in Microsoft 365 through an Azure Automation Runbook. Workday is the single source of truth; Azure simply receives and enforces whatever permissions Workday dictates.
The runbook should:
• Detect relevant events or deltas in Workday (hire, transfer, termination).
• Provision new users in Azure AD, assign them the correct groups, licenses, and application roles based on Workday access-permission fields.
• Deprovision or disable accounts the moment Workday flags a termination, removing all group memberships and licenses.
• Log every action to Log Analytics and raise an alert on any failures or unexpected responses.
• Be written in PowerShell (native modules or MS Graph SDK) and packaged so I can import it straight into Azure Automation along with a clear README for setup of credentials, variables, and schedules.
Acceptance is straightforward: when I change a test worker’s status in Workday, the corresponding Azure account must appear, update, or disappear within the scheduled run, with accurate group memberships and a clean audit trail.
The runbook should:
• Detect relevant events or deltas in Workday (hire, transfer, termination).
• Provision new users in Azure AD, assign them the correct groups, licenses, and application roles based on Workday access-permission fields.
• Deprovision or disable accounts the moment Workday flags a termination, removing all group memberships and licenses.
• Log every action to Log Analytics and raise an alert on any failures or unexpected responses.
• Be written in PowerShell (native modules or MS Graph SDK) and packaged so I can import it straight into Azure Automation along with a clear README for setup of credentials, variables, and schedules.
Acceptance is straightforward: when I change a test worker’s status in Workday, the corresponding Azure account must appear, update, or disappear within the scheduled run, with accurate group memberships and a clean audit trail.