---
category: [Administration & Integrations, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions, Platform and Product Extensions/Workday Extend, Platform and Product Extensions/Integration]
keyword: Extend
nav: wcp_docs
parent_url: /wcp_docs/
title: Create Orchestration Credentials
layout: subsection
---

### Prerequisites

<a id="prereq_N10022_N1001F_N10001"></a>
Create an orchestration.

### Context

<a id="context_N1002E_N1001F_N10001"></a>
Orchestration Builder enables you to create authentication credentials that you can use in API request components.

### Steps

1.  <a id="step_N1003E_N1003B_N1001F_N10001"></a>In Orchestration Builder, open the orchestration you want to define authentication credentials for.
2.  <a id="step_N10037_N10034_N1001F_N10001"></a>In the orchestration's <b>Settings</b>, select the <b>Credentials</b> tab.
3.  <a id="step_N10058_N1003B_N1001F_N10001"></a>Provide a <b>Credential Name</b> and select an authentication <b>Type</b>: <i>API Key</i>, <i>Basic Auth</i>, <i>OAuth</i> , or <i>ISU (Integration System User)</i>. To use ISU credentials, you must first set up an Integration System User. See [Steps: Set Up ISU Authentication for Apps](/wcp_docs/GUID-3277fec3-24c9-41da-9840-c61b41033f28-enHYPHENus.html).

    <b>Note:</b>

    You can use ISU authentication with the <b>Send Workday API Request</b> component. Although it's technically possible to use it with the <b>Trigger Business Process Step</b> too, Workday recommends that you use access tokens with that component.

4.  <a id="step_N10071_N1003B_N1001F_N10001"></a>For API Key, provide a <b>Key</b> and <b>Value</b> pair. Select where to append the details: <i>Query Params</i> or <i>Header</i>.

    For Basic Auth, provide a <b>Username</b> and <b>Password</b>.

    For OAuth, select a <b>Type</b>, <i>Cred Store Reference</i> or <i>Token</i>.

    <b>Note:</b> Workday recommends that you always use the <i>Cred Store Reference</i> option with your Production tenant.

    For the <i>Token</i> type, provide a <b>Token</b> and <b>Scheme</b>. For the <i>Cred Store Reference</i> type, provide the <b>Reference</b> and, from the <b>Client Authentication</b> drop-down menu, select whether your request includes the credentials in the request header or the request body.

    <b>Note:</b> Workday recommends that you update credentials in the Cred Store at least a week before they expire and ensure that both the old and new versions are valid. This enables an overlap period during which either can be used, avoiding potential disruption.

    For ISU, provide a <b>Name</b> for the credential. In the <b>Username</b> expression field, provide the ISU's name.



### Related Information

[Concept: ISU Authentication](/wcp_docs/GUID-cb3e0fcd-bb97-4005-8d10-3a02e88dab71-enHYPHENus.html)