Import Workday Data | Create or Update AD Users rule

Create in

Determines the initial location within Active Directory, where the new user accounts will be created.

Logon Name (SamAccountName)

By default, the SamAccountName is automatically generated from the Data Source assuming the Data Source contains the correct named fields.

If field names are not the same as shown for the selected format, contact Cayosoft for an override format.

If the SamAccountName resides in the Data Source, then use the Selector button to pick the field that stores the SamAccountName.

The SamAccountName must have a unique value in the target domain.

UPNSuffix

It is the domain name component of the new user’s UserPrincipalName (UPN).

If you use Microsoft 365, this value should be set to a domain registered in Microsoft 365/Azure AD.

UserPrincipalName

By default, the UserPrincipalName (UPN)  is automatically generated from the Data Source assuming the Data Source contains the correct named fields. If field names are not the same as shown for the selected UPN format, contact Cayosoft support for an override format. If the UPN resides in the Data Source, then use the Selector button to pick the desired field. The UPN must be a unique value.

FirstName (GivenName)

If the Data Source contains a field named FirstName, do nothing. Otherwise, use the Selector button to choose a field from the Data Source. 

Initials

Specify user initials.

Last/SurName (sn)

If the Data Source contains a field named LastName, do nothing. Otherwise, use the Selector button to choose a field from the Data Source. 

Name (cn)

If the Data Source contains fields named FirstName and LastName, choose the desired format or do nothing. Otherwise, use the Selector button to select a field from the Data Source or contact Cayosoft for an override format.

Display Name

If the Data Source contains fields named FirstName and LastName, choose the desired format and do nothing. Otherwise, use the Selector button to select a field from the Data Source or contact Cayosoft for an override format. 

Description

If the Data Source contains a field name Description, do nothing. Otherwise, manually enter a static text value or use the Selector button to choose a field from the Data Source. 

Settings

Default Password

This setting defines the password for the new account. This value can be static text, a field from the Data Source chosen using the Selection button, or set to Generate Random Password

Must change password at next logon

Account enabled

User cannot change password

Password never expires

These settings enable/disable the standard Active Directory user object settings. 

Account Expiration Date

This setting defines the Account Expiration attribute in Active Directory.

In addition to populating this field from the Data Source, a text string can be manually entered into the field in the format MM/DD/YYYY or YYYY-MM-DD. 

Organization

Office

Job Title (Title)

Department

Company

Employee Number

EmployeeID

Division

If the Data Source contains one of these field names, do nothing. Otherwise, manually enter a static text value or use the Selector button to choose a field from the Data Source.

Manager Identifier

Use the Selector button to choose a field from the Data Source that is a unique identifier for the user’s manager. Typically this will be the Managers' EmployeeNumber or EmployeeID.

AD Attribute for Manager Lookup

Select an Active Directory attribute used to search for the value of the Manager Identifier specified in the field above.

Contact Info

Country

If the Data Source contains a field name Country, do nothing. Otherwise, manually enter a static text value or use the Selector button to choose a field from the Data Source.

Email Address

If the Data Source contains a field name or Email Address, do nothing. Otherwise, manually enter a static text value or use the Selector button to choose a field from the Data Source.

Office Phone (telephoneNumber)

Mobile Phone (mobile)

Street Address

City (l)

State

Postal Code

If the Data Source contains a field with one of these names, do nothing. Otherwise, manually enter a static text value or use the Selector button to choose a field from the Data Source.

Alternate Name Generation Rules

Name conflict resolution

This option determines how the system should react when the name of a user being created already exists.

Logon Name (SamAccountName) (Alternative)

UserPrincipalName (Alternative)

Name (cn) (Alternative)

Email Address (Alternative)

DisplayName (Alternative)

The behavior of this attribute is the same as in the Contact Info section.

Counter Format

This setting specifies the number of fixed symbols the counter should have.

Add counter when

Specifies if a counter should always be added to the username, or only when name conflicts occur. The counter option is not available when the Use Alternative Generation Rules option is set to On failure record error in Rule Execution History and goes on.

Other Properties

Other properties

Using the picker dialog, set a mapping between data source columns and target user properties. 

Other properties script

Data mapping also can be set by the script.

If you want every provisioned user to have extension attribute 1 populated with some string value then use this:
{@{'extensionAttribute1'='YourString'}}

If you want every provisioned user to have extension attribute 2 populated with the corresponding value from the column in your data source file, then use this:
{@{'extensionAttribute2'=$_.EXT2}}, since EXT2 is the name of the column from your data source.

Notify Manager

Notify Manager

Specify whether you want to notify the manager when the user is created. You can also select send email for each created user or send one email for all created users.  

Additional to

Additional emails can be sent to the Default Notify & Alert Email Address - usually, this is the administrator's email address.

CC, BCC

Email address where the copy will be sent.

From

Users can receive emails from default SMTP from the address.

Subject

Email subject.

Message

Message text.

Limit the number of emails sent per minute

An integer value that represents the number of emails sent per minute by this rule.

To change the default value, navigate to Home > Configuration > Settings > Email Settings (SMTP).

The default limit for Microsoft 365 SMTP gate is 30 emails per minute.