---
category: [Administration & Integrations, Platform and Product Extensions, Platform and Product Extensions/Integration, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions/Workday Extend]
keyword: [Integrate, Workday Integration, Orchestrate for Integrations]
nav: wcp_docs
parent_url: /wcp_docs/
title: Create Integration System Users for Apps
layout: subsection
---

### Prerequisites

Security: <i>Integration Security</i> domain in the Integration functional area.

### Context

An Integration System User (ISU) is a type of Workday user account that apps can use to access data as a system user. The integration system security group that includes the ISU must have access to the appropriate security domains:

-   View/Modify access to any Workday REST API called by the app. For Extend apps using Graph API, configure the security domains for the query data sources and mutations used by the app.
-   Get/Put access to Workday SOAP APIs in orchestrations.


For information and guidelines about the ISU authentication, see [Concept: ISU Authentication](/wcp_docs/GUID-cb3e0fcd-bb97-4005-8d10-3a02e88dab71-enHYPHENus.html).

### Steps

1.  In your Workday tenant, access the <b>Create Integration System User</b> task.
2.  Enter the username and password.

    Keep the session timeout value of zero to prevent session expiration.

3.  Access the <b>Create Security Group</b> task.
    1.  On the <b>Type of Tenanted Security Group</b> field, select <i>Integration System Security Group (Unconstrained)</i>.
    2.  Enter a group name based on your naming conventions.
    3.  Add the newly created ISU user.

4.  Access the <b>Maintain Permissions for Security Group</b> task.

    Alternatively, from the related actions on the newly created integration system security group, select <b>Security Groups</b> &gt; <b>Maintain Domain Permissions for Security Group</b>.

5.  Assign the appropriate <b>View/Modify</b> and <b>Get/Put</b> permissions to the security domains required by the app.

    For an Extend app with model security domains, assign the appropriate <b>View/Modify</b> permissions accordingly.

6.  Run the <b>Activate Pending Security Policy Changes</b> task.