...
- Two data centers and a near real time 2nd site (atlanta)
- Role and hierarchy is the basis row level security. The security data could all be exported in a report.
- All updates are logged with a timestamp and a user id. All attributes - not just rows.
- They do not offer dual factor authentication
- There are no 'direct pipes / private networks. Workday is on the internet.
- User accounts can be tied to a particular authen system - as in delegated single sign on.
- UserID generation: Workday would publish the event, CU IDMgmt would listen, pick it up, call back with the event id, and provide a Netid to Workday to store with the person as well as either a) telling Peoplesoft directly OR b) letting Workday update Peoplesoft's external system table (via web service).
- Audit logging doesn't keep the IP address.
- Workday cannot lock down by IP address.
- Timeouts for inactivity by groups and functions: They don't know and will be checking.
- Group management: it is all done in Workday. They don't know of the feasibility in using eternal groups.
- People can be in multiple functional domains.
- Row level access is based on your org structure.
- Security group management: Too much to list. It is just best to see the demo. There will have to be many management conversations about how to manage groups, grant them rights and assign people to them.
- Workday Test Environments - Cornell requires masking ("scrambling") of non-production transactional data values of SSN, credit card number, driver's license number, bank account number and patient treatment information.
Data marts
Appears that the operational reporting capability within the WorkDay application is fairly powerful. Much of the operational reporting, against HR data only, could most likely be done in the application rather than a datamart solution. The need for an HR datamart will be to support more managerial and analytical type reporting which requires more advanced data transformation, aggregation, and the ability to integrate with non-HR data sources such as financial data.
...