Registering Hyland for Workday as an External Application - Registering Hyland for Workday as an External Application - This section describes how system administrators can register Hyland for Workday as an external application to enable secure communication with the Hyland cloud services used by the solution. Complete this configuration whether you use the Hyland Content Innovation Cloud (CIC) or OnBase through Content Federation Services (CFS) as the content repository. The following procedure applies to both external service applications and external web server applications. - Content Innovation Cloud - Hyland for Workday - Current/Hyland-for-Workday/mrc1730640629247 - Current - Current

This section describes how system administrators can register Hyland for Workday as an external application to enable secure communication with the Hyland cloud services used by the solution. Complete this configuration whether you use the Hyland Content Innovation Cloud (CIC) or OnBase through Content Federation Services (CFS) as the content repository. The following procedure applies to both external service applications and external web server applications.

1. Open the Administration Portal.
2. Select the Identity tab under the banner.
3. In the sidebar, click External Applications.
   The External Applications page is displayed.
4. Click Create External Application.
   The Create External Application wizard is displayed.
5. Select an application profile for the external application.
   • Select Service Application to register a service application that calls Content Innovation Cloud APIs without an interactive (human) user.
   • Select Web Server Application to register a server-based web application that calls Content Innovation Cloud APIs in the context of an interactive user.
6. Click Next Step.
   The Application Name page is displayed.
7. Enter a name for the application in the Application Name field, and then click Next Step.
   Depending on the application profile you selected, either the User Mapping page or the Redirect URIs page is displayed.
8. If you selected Service Application as the application profile, select a service user from the Mapped Service User drop-down list, and then click Next Step.
9. If you selected Web Server Application as the application profile, configure the redirect URIs.
   1. On the Redirect URIs page, enter the URI the user is allowed to be redirected to after signing in successfully.
      • To add another URI, click Add Redirect URI, and enter the URI in the new Redirect URI field.
      • To remove a URI, click the trash button displayed to the right of the Redirect URI field.
   2. Click Next Step.
   3. On the Post Logout Redirect URIs page, enter the URI the user is allowed to be redirected to after logout.
      • To add another URI, click Add Post Logout Redirect URI, and enter the URI in the new Post Logout Redirect URI field.
      • To remove a URI, click the trash button located to the right of the Post Logout Redirect URI field.
   4. Click Next Step.
10. From the Allowed Scopes drop-down list, select the scopes the external application is allowed to request a grant for.
    Note: At least one scope must be assigned to provide access to Content Innovation Cloud APIs. Required scopes vary depending on the resources the external application needs. The following scopes are used for Hyland for Workday: wdx hxp hxp.integrations email hxpr hxps offline_access openid profile profile.attributes hxp.nucleus.account environment_authorization
11. If environment_authorization is one of the scopes you selected, then select the associated environment and subscribed application for authorization.
    1. From the Environment drop-down list, select the environment this external application should be restricted to.
       The Application drop-down list is displayed.
    2. From the Application drop-down list, select the subscribed application to link to this external application.
12. Click Next Step.
    The Review page is displayed.
13. Review the settings for the external application.
    To return to a previous step, either select the step from the left side of the wizard, or click Previous Step.
14. Click Create External Application to confirm the settings and register the external application.
    The Summary page displays the auto-generated application ID and client secret for the external application.
15. Copy the Application ID and Secret values to a secure location.

    The integrating application requires these values in order to obtain access tokens from the Content Innovation Cloud IAM API.

    Note: The secret value will not be shown again after the Create External Application wizard is closed. If necessary, you can reset the secret as described in the Resetting the Secret for an External Application chapter in the Content Innovation Cloud Administration Portal documentation.
16. Click Close to return to the External Applications page.