Create an Integration System User (ISU) in the Workday tenant and grant it the security domain permissions needed for the Student module (e.g., Student Academic Records domain)
Authenticate using WS-Security UsernameToken in the SOAP header; construct the endpoint URL as https://{tenant}.workday.com/ccx/service/{tenant}/Student/{version}
Construct a Get_Academic_Records SOAP request with appropriate student filter criteria (student ID or enrollment period) in the request body
Parse the SOAP response XML for Academic_Record_Data elements containing enrollment status, academic period, program of study, and GPA
For large populations, use paging parameters (Page and Count) in the request and iterate until the Total_Pages value is satisfied
Transform and load the extracted records to your downstream reporting system, mapping Workday Reference IDs to your local student identifiers
Known gotchas
Workday SOAP services enforce a per-tenant rate limit (~10 requests/second); bursting above this returns a SOAP fault, not an HTTP 429 — catch the fault code and implement backoff
Workday SOAP WWS versions are tied to API releases (e.g., v45.2 = 2025R2); calling a deprecated version may succeed but silently omit newer fields — pin to a supported version and review release notes each cycle
ISU credentials must be rotated per institutional policy; service outages caused by expired ISU passwords are a common integration failure mode — monitor expiry proactively
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp