Identity Manager 4.7.3 and 4.8.x offers automatic provisioning and synchronization of users to cloud applications. The new Workday driver for Identity Manager can seamlessly provision users from the Workday cloud application, keeping the user identity information consistent across the Identity Vault (IDV) and can also update few of the connected system attributes.

The driver version will change to 1.2.2.0 after applying this patch.

Identity Manager 4.7.3 or later

Identity Manager 4.8.x or later

The driver upgrade process involves the following tasks:

• Updating the Driver Packages
• Updating the Driver Files
• Extending the Schema

• Download the following packages from https://nu.novell.com/designer/packages/idm/WorkdayDriver/plugins/ to a temporary location on your computer.


• NETQWDBASE_1.0.1.20200917153430.jar
• NETQWDRETRY_1.0.0.20200923124038.jar


• Open Designer.


• In the Outline view, right-click the Package Catalog.


• Click Import Package


• Browse to the location where you downloaded the Workday packages.


• Click Select All to import all of the packages displayed


• Click OK.


• Open the project containing the driver.


• Right-click the driver for which you want to upgrade an installed package, then click Driver > Properties.


• Click Packages.

A check mark indicates a newer version of a package in the Upgrades column.

• Click Select Operation for the package that indicates there is an upgrade available.


• From the drop-down list, click Upgrade.


• Select the version that you want to upgrade to, then click OK.

NOTE: Designer lists all versions available for upgrade.

• Click Apply.


• (Conditional) Fill in the fields with appropriate information to upgrade the package, then click Next.

Depending on which package you selected to upgrade, you must fill in the required information to upgrade the package.

• Read the summary of the packages that will be installed, then click Finish.


• Review the upgraded package, then click OK to close the Package Management page.

1. Take a back-up of the current driver configuration.


2. (Conditional) If the driver is running locally, stop the driver instance and the Identity Vault.


3. (Conditional) If the driver is running with a Remote Loader instance, stop the driver and the Remote Loader instance.


4. Download and unzip the contents of the IDM_WorkDayDriver_1220.zip file to a temporary location on your computer.


5. (Conditional) To update the driver files as a root user:


1. On the server where you want to apply the driver patch, log in as root/administrator.


2. Navigate to the extracted IDM_WorkDayDriver_1220.zip directory and perform one of the following actions for your platform:


• Linux: Install the new novell-DXMLWday.rpm in your driver installation directory by running the following command in a terminal window:

rpm -Uvh (patch-path)/linux/novell-DXMLWday.rpm

• Windows: Copy the WorkdayShim.jar file to your driver installation folder. For example, \NetIQ\IdentityManager\NDS\lib, if the driver is locally installed with the Identity Manager engine or \Novell\RemoteLoader\lib if the driver is installed with the Remote Loader.


6. (Conditional) To update the driver files as a non-root user:


1. Verify that non-root edirectory="" location=""/rpm directory exists and contains _db.* file.

The _db.* file is created during a non-root installation of the Identity Manager engine. Absence of this file might indicate that Identity Manager is not properly installed. Reinstall Identity Manager to correctly place the file in the directory.

2. To set the root directory to the location of non-root Identity Vault, enter the following command in the command prompt:

ROOTDIR=<non-root eDirectory location>

This will set the environmental variables to the directory where Identity Vault is installed as a non-root user.

3. To install the driver files, enter the following command:

For example, to install the Workday driver RPM, use this command:

rpm --dbpath $ROOTDIR/rpm -Uvh --relocate=/usr=$ROOTDIR/opt/novell/eDirectory --relocate=/etc=$ROOTDIR/etc --relocate=/opt/novell/eDirectory=$ROOTDIR/opt/novell/eDirectory --relocate=/opt/novell/dirxml=$ROOTDIR/opt/novell/dirxml --relocate=/var=$ROOTDIR/var --badreloc --nodeps --replacefiles /home/user/novell-DXMLWday.rpm

where /opt/novell/eDirectory is the location where non-root eDirectory is installed and /home/user/ is the home directory of the non-root user.

7. (Conditional) If the driver is running locally, start the Identity Vault and the driver instance.


8. (Conditional) If the driver is running with a Remote Loader instance, start the Remote Loader instance and the driver instance.

As part of solution, we need to extend the schema of eDirectory so that the Workday driver can create these additional objects in the IDV. The proposed schema extension in ldif and sch formats are available for download. The schema file should only be extended with the ndssch utility. Using any other method for importing the schema file fails for certain attributes. A sample syntax for importing the schema file has been provided below:

/opt/novell/eDirectory/bin/ndssch -h idv.server.DNS.name -F /tmp/wd-schema.logadmin.services.data /tmp/wd-schema.sch

The wd-schema.sch file will be available in WorkDayDriver\schema folder.

Enhancements Introduced in This Release

• Workday driver has been updated to fetch only the changes happened to the workers photo since last polling cycle which improves the driver's performance significantly.
• The driver introduces a new GCV named 'Retry Events Settings' which allows you to re-configure certain attributes which were logged on the Workday portal while activating a user.
• wd-E-TerminationLastDayOfWork, wd-C-TerminationLastDayOfWork and wd-C-SupplierID user attributes have been introduced.

Issues Fixed in Previous Release

• Phone number synchronizes on subscriber channel when an update to the phone number extension happens. (Bug 1167347)
• Workday driver handles successful transaction when an empty document is returned from Workday for a rename worker object request. (Bug 1167348)
• Workday driver does effective polling better to handle issues due to timezone difference. (Bug 1167444)
• Workday driver does not reset the wd-effectiveDate attribute to the current date through policy channel. (Bug 1169183)