> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Workiva

> Connect Workiva to Lumos with an OAuth API grant's client ID and secret. The Early Access connector doesn't sync accounts or permissions yet.

> [!NOTE]
>
> The Workiva connector is in Early Access. The card is marked **Early Access** in **Integrations → Discover**. When you connect it, Lumos notifies you once the integration is live.

## After this article

You'll be able to connect Workiva to Lumos with the client ID and client secret from a Workiva API grant.

## Capabilities

| Functionality | Type | Sync | Provision | Description |
| - | - | - | - | - |
| Authenticate | Account | No | No | Saves the connection settings |

| AppStore | Offboarding | Access Reviews | License Management |
| - | - | - | - |
| No | No | No | No |

The connector doesn't sync accounts, permissions, or activity yet.

## Required plan and roles

* **A Workiva Organization Security Administrator.** Only this role can create the API grant Lumos uses.
* **An API grant.** Creating it gives you the **Client ID** and **Client Secret**. Workiva shows the secret only once.
* **Your Workiva tenant identifier and API base URL.** The base URL depends on where your Workiva users are hosted, for example `https://api.app.wdesk.com`.

## Read-only access vs provisioning

**Is read-only possible?** Yes, and it's the only mode available. The Workiva connector registers no provisioning actions.

**What read-only requires.** The client ID and client secret from your Workiva API grant. Lumos uses them to request an access token with the OAuth client credentials flow.

## Instructions

**Phase 1. Create an API grant in Workiva**

1. Log in to Workiva as an Organization Security Administrator.
2. Click your name and select **"Organization Admin"**.
3. Go to **Security → Provisioning** and click **"Add Identity or API"**.
4. Select **"API Grant"**, fill in the details, and save it.
5. Copy the **Client ID** and **Client Secret**.

**Phase 2. Connect in Lumos**

1. Find the Workiva card in your Lumos integrations.
2. Enter the **"Client ID"** and **"Client Secret"**.
3. Enter your **"Tenant Identifier"**.
4. Enter the **"Base URL"** of your Workiva API, including `https://` and with no path after the domain.
5. Click **"Connect"**.

## Troubleshooting

**Lost the client secret.** Workiva shows the secret only once. Regenerate it from the **Security** tab in your Workiva user profile with **"Regenerate"** in the **Actions** menu, then reconnect in Lumos.