---
category: [Administration & Integrations, Platform and Product Extensions, Platform and Product Extensions/Integration, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions/Workday Extend]
keyword: [Extend, Model Components, promote]
nav: wcp_docs
parent_url: /wcp_docs/
title: >- 
  Reference: Migrating Extend Components Between Tenants
layout: subsection
---

<a id="section_N10021_N1001E_N10001"></a>
Follow these guidelines when you migrate Workday Extend components between tenants. These guidelines apply when you migrate Workday Extend components:

-   From a Development tenant to an Implementation tenant.
-   From an Implementation tenant to a Sandbox tenant.
-   From a Sandbox tenant to a Production tenant.


<a id="section_nvq_c3b_bfb"></a>
Ensure that the target tenant is Workday Extend-enabled. On each tenant, consider the different Workday Extend components when migrating your app.

## <a id="section_wbp_m1s_3pb"></a>Custom Apps

-   To migrate your app to the Implementation tenant, promote your app to Implementation on the Workday Developer Site.
-   To migrate your app to the Sandbox tenant, promote your app to Sandbox on the Workday Developer Site.
-   To migrate your app to the Production tenant, promote your app to Production on the Workday Developer Site.


## <a id="section_j55_41s_3pb"></a>Security

Set up the required security policies, security groups, and authentication configurations, such as:

-   Configure security policies for the <i>Workday Extend</i> security domain, including its subdomains, in the System functional area.
-   Configure security policies for the <i>OX for Non-Implementers</i> and <i>Special OX Web Services</i> domains in the System functional area.

    This is a prerequisite for using Object Transporter 2.0 to migrate configuration packages.

-   Configure ISU users and related security groups, as appropriate.
-   Configure the required authentication used by the custom and integration apps.

    For OAUTH2, OAUTH_CLIENT_CREDENTIAL, or WCPISU authentication types, access the <b>Create (or Edit) External Client CredStore</b> task. Ensure the correct configuration for your app.

    For the AWSV4 authentication type, access the <b>Create (or Edit) AWS Access Key Cred Store</b> task. Ensure the correct configuration for your app.

    Ensure that the `appId` values in the `authTypes[]` in the SMD match the App Id and Reference ID values in the tenant Cred Store.



## <a id="section_t53_r1s_3pb"></a>Configuration Items

Use customer deployment tools such as Object Transporter 2.0 to migrate tenanted configuration items such as:

-   Business process security policies and domain security policies of model components.
-   Custom objects.
-   Custom reports and calculated fields, including those with model component data sources.
-   Model components created after March 22, 2024.


<b>Note:</b> You must recreate all custom tasks, including any worklets or dashboards that use the custom tasks.

Ensure that the Reference ID, App ID, and Site ID values use the reference ID with the postfixed account ID. The list of apps on the Workday Developer Site displays the reference ID.

## <a id="section_hhg_t1s_3pb"></a>Workday Extend API Clients

For the Workday Extend API clients registered on the Workday Developer Site, allowlist their client IDs on the target tenant. From the <b>Console</b> section of the Developer Site menu, select <b>API Clients</b> to manage API clients.

Only a Company Administrator can allowlist client IDs on a tenant. When viewing an API client owned by your account, click <b>Modify Authorized Tenants</b>, and then add or remove tenants from the API client's allowlist.

## <a id="section_ts3_v1s_3pb"></a>External or Integration Apps

Deploy all external apps, integrations, and services to the target tenant, and configure them as appropriate.

### Related Information

[Administrator Guide: Steps: Set Up Security Permissions](https://doc.workday.com/access/sources/dita/topic?wd:docset=adminguide&ft:locale=en-US&resourceid=kqi1577400592841)

[Administrator Guide: Steps: Grant Integration or External Endpoint Access to Workday](https://doc.workday.com/access/sources/dita/topic?wd:docset=adminguide&ft:locale=en-US&resourceid=dan1370797146076&dita:mapPath=dan1370797994976.ditamap)

[Administrator Guide: Create Custom Object Definitions](https://doc.workday.com/access/sources/dita/topic?wd:docset=adminguide&ft:locale=en-US&resourceid=dan1370797402608)

[Administrator Guide: Create Custom Reports](https://doc.workday.com/access/sources/dita/topic?wd:docset=adminguide&ft:locale=en-US&resourceid=dan1370797785951)

[Administrator Guide: Steps: Migrate Packages with Object Transporter](https://doc.workday.com/admin-guide/en-us/manage-workday/tenant-configuration/implementation-tools/customer-central/object-transporter/qjd1632744764567.html)

[Steps: Migrate Tenanted Configuration Items](/wcp_docs/GUID-d16354ad-cad2-41f0-9f49-d5ec0194c720-enHYPHENus.html)

[Reference: Implementation Best Practices for GOLD Tenants](/wcp_docs/GUID-e9044cd0-3653-4faf-8280-d5870961fd1c-enHYPHENus.html)

[Create Custom Tasks](/wcp_docs/yna1522349470046.html)

[Steps: Install Apps and Configurations on Other Tenants](/wcp_docs/GUID-65d0bd19-d7c7-4ca3-8c7f-de91c62148e6-enHYPHENus.html)