Skip to main content
The Workiva connector is in Early Access. The card is marked Early Access in Integrations → Discover. When you connect it, Lumos notifies you once the integration is live.

After this article

You’ll be able to connect Workiva to Lumos with the client ID and client secret from a Workiva API grant.

Capabilities

The connector doesn’t sync accounts, permissions, or activity yet.

Required plan and roles

  • A Workiva Organization Security Administrator. Only this role can create the API grant Lumos uses.
  • An API grant. Creating it gives you the Client ID and Client Secret. Workiva shows the secret only once.
  • Your Workiva tenant identifier and API base URL. The base URL depends on where your Workiva users are hosted, for example https://api.app.wdesk.com.

Read-only access vs provisioning

Is read-only possible? Yes, and it’s the only mode available. The Workiva connector registers no provisioning actions. What read-only requires. The client ID and client secret from your Workiva API grant. Lumos uses them to request an access token with the OAuth client credentials flow.

Instructions

Phase 1. Create an API grant in Workiva
  1. Log in to Workiva as an Organization Security Administrator.
  2. Click your name and select “Organization Admin”.
  3. Go to Security → Provisioning and click “Add Identity or API”.
  4. Select “API Grant”, fill in the details, and save it.
  5. Copy the Client ID and Client Secret.
Phase 2. Connect in Lumos
  1. Find the Workiva card in your Lumos integrations.
  2. Enter the “Client ID” and “Client Secret”.
  3. Enter your “Tenant Identifier”.
  4. Enter the “Base URL” of your Workiva API, including https:// and with no path after the domain.
  5. Click “Connect”.

Troubleshooting

Lost the client secret. Workiva shows the secret only once. Regenerate it from the Security tab in your Workiva user profile with “Regenerate” in the Actions menu, then reconnect in Lumos.