Citrix Secure Private Access

Configure Workday

Citrix Gateway SaaS Application

Users can securely log on to Workday using their enterprise credentials.

To configure Workday for SSO through SAML, perform the following:

  1. Log on to Workday as an administrator.
  2. Navigate to Edit Tenant Setup - Security and then click Edit Tenant Setup.

    Edit tenant setup

  3. Click Single Sign-on.

    Click single sign-on

  4. Click the plus icon in the Redirection URLs table.
  5. In Login Redirect URL, enter the URL in the format https://impl.workday.com/<customer>/login-saml2.flex.
  6. Click Enable SAML Authentication.

    Enable SAML authentication

  7. Click the plus (+) icon under SAML Identity Providers to add a row, and specify the following information:
    1. Identity Provider Name - type Citrix Gateway.
    2. Issuer - type a unique issuer name.
  8. In x509 Certificate, click the X509 Certificate icon and then click Create x509 Public Key.
  9. Download the certificate from the Citrix Cloud wizard (Citrix Gateway Service > Add a Web/SaaS App > Single sign on > Certificate).

    Create certificate

  10. Copy the text in the certificate from —–BEGIN CERTIFICATE—– to —–ENDCERTIFICATE and paste the certificate in the Certificate field.
  11. Click OK.
Configure Workday