AUTHENTICATION FUNDAMENTALS

DESCRIPTION DURATION
This course is designed for Workday administrators who are 7 Hours
responsible for authentication.
TRAINING UNITS
Through hands-on activities, you will learn how to configure and 1
test authentication policies by requiring specific authentication
types and limiting users' access based on certain conditions.
Next, you will configure and test different types of multifactor authentication options, such as an
authenticator app and one-time passcode. You will also learn to configure and test single sign-
on (SSO) with the option of using a different identity provider for various user groups. Finally,
you will learn strategies for evaluating your tenant security health and taking action to improve
your organization's security posture.

This two-day Learn Independent course will provide a Workday administrator with the
knowledge and tools to configure authentication. After taking this course, you will be able to
recommend authentication configurations that best secure your organization's tenants and
employee data.

PRETRAINING CONSIDERATIONS

To successfully complete this course, users will need a working knowledge of the core concepts
of Workday, including navigation, organizations, business processes, and reporting. These
topics are covered at an introductory level in Workday Core Concepts or in more depth in
Workday Foundations. To succeed in this course, you should complete one or both introductory
courses before enrolling in Authentication Fundamentals.

Users should also have a foundational knowledge of the Workday security framework before
taking this course.

Required Prerequisites

Configurable Security Fundamentals

Authentication Fundamentals

DELIVERY FORMAT

This course is offered as a:

Learn Independent

OBJECTIVES

The goal of this course is to introduce you to Workday authentication and SAML configuration,
terminology, and concepts to enable you to deploy and monitor these features. At the end of this
course, you should be able to:

• Set up an authentication policy using both network conditions and access restrictions.
• Explain each multifactor authentication type available in Workday and its setup
requirements.
• Outline the steps to configure single sign-on (SSO).
• Describe how to test and troubleshoot authentication and single sign-on (SSO)
configurations.
• Recommend optimal authentication policies based on your organization's needs and
population.
• Monitor user activity and enable notifications on changes to sensitive information.

COVERED TOPICS

1: Authentication Policies

• Explain the purpose of authentication in Workday.

• Describe the components of an authentication policy.
• Identify the impact of authentication rule order on user access.
• Configure authentication rules, given a list of requirements.
• Use the Signons and Attempted Signons report to troubleshoot sign-in issues.
• Set up and test IP range access.
• Configure an access restriction.
• Configure mobile authentication settings in a tenant.

2: Multifactor Authentication

2 Authentication Fundamentals
Confidential © 2021 Workday, Inc.
 Authentication Fundamentals

• Explain the types of multifactor authentication.

• Assess which authentication type to use for a security group.
• Configure the authentication policy to use an authenticator application.
• Configure an authentication policy to use Duo for multifactor authentication.
• Configure an authentication policy to use a one-time pass code for multifactor
authentication.

3: SAML and SSO

• Define single sign-on (SSO) and its key components.

• Outline the overall process to configure SSO.
• Interpret SSO error messages and sign-in activity.
• Explain the process for configuring an authentication selector.
• Define step-up authentication.
• Explain when to use Workday as the identity provider.

4: Authentication Administration and Monitoring

• Define strict password rules to reduce the likelihood of an attacker guessing a password.
• Evaluate tenant security health and take action to improve your organization's security
posture.
• Monitor user activity and enable notifications on changes to sensitive information.

ADDITIONAL COURSES

Upon completion of this course, consider taking one or more of the following courses,
depending on your role:

• Advanced Configurable Security

• Configurable Security Maintenance
• Integration Security

Authentication Fundamentals 3
Confidential © 2021 Workday, Inc.