how to setup schedule interview integration between Workday and Outlook

To integrate Workday interview scheduling with Outlook/Microsoft 365, ensure that Workday is correctly configured to use Microsoft Entra ID (Azure AD) for SSO and that the Workday–Microsoft 365 integration prerequisites are met. The error page instead of a sign-in or consent prompt typically indicates an SSO or SAML configuration issue between Workday and Microsoft Entra.

Use the following checklist focusing on the Microsoft/Entra side and the Workday SSO configuration.

1. Verify Workday is added as an Enterprise app in Microsoft Entra

• In the Microsoft Entra admin center, go to Entra ID → Enterprise apps → New application.
• In Add from the gallery, search for Workday and add it.
• This creates the Workday SSO application principal that will be used for SAML and OAuth.

2. Confirm Workday SSO configuration with Microsoft Entra Workday must already be configured for SSO with Microsoft Entra ID.

In Microsoft Entra (Workday Enterprise app):

• Ensure SAML-based SSO is configured per the Workday SSO tutorial.
• Note the following values from the Workday Enterprise app:
  • Identifier (Entity ID)
  • Login URL
  • Microsoft Entra Identifier

In Workday (Tenant Setup – Security):

• Ensure SSO is already set up using the “Configure Workday for Single sign-on with Microsoft Entra ID” guidance.
• Confirm the Service Provider ID in Edit Tenant Setup – Security matches the Identifier (Entity ID) of the Workday SSO app in Microsoft Entra.
• Ensure OAuth 2.0 Clients Enabled = Yes and Enable SAML Authentication = Yes.
• In the SAML Identity Provider configuration, verify:
  • Identity provider name: any name.
  • Issuer: must match the Microsoft Entra Microsoft Entra Identifier.
  • X.509 Certificate: uses the X.509 public key from Microsoft Entra.
  • SP initiated: selected.
  • Service Provider ID: unique and matching the Entra Identifier (Entity ID).
  • IdP SSO Service URL: set to the Microsoft Entra Login URL.

If these values don’t match, Workday will fail SAML handoff and show an error instead of redirecting to Microsoft Entra.

3. Create and use the X.509 public key from Microsoft Entra in Workday

• From the Workday SSO app in Microsoft Entra, export the SAML signing certificate (public key) as required.
• In Workday, create a new X.509 public key using this certificate.
• Assign this X.509 key in the SAML Identity Provider configuration so Workday can validate SAML messages.

4. Configure Workday authentication policies for the integration

• In Workday, run Manage Authentication Policies.
• Edit the policy for the tenant and ensure:
  • The policy is scoped to the OAuth client identity used by the integration (for Employee Self-Service or similar scenarios).
  • Users accessing interview scheduling are covered by a policy that allows SAML/OAuth sign-in via the configured IdP.

5. Validate that Microsoft Entra SSO works independently Before testing interview scheduling:

• Test basic SSO to Workday via the Workday Enterprise app in Microsoft Entra.
• From the Microsoft 365 app launcher or Entra Enterprise apps, launch Workday and confirm:
  • Users are redirected to Microsoft Entra sign-in.
  • After sign-in, users land in Workday without error.

If this fails, fix the SAML configuration (Issuer, Service Provider ID, IdP SSO Service URL, certificate) before troubleshooting interview scheduling.

6. Confirm identity alignment between Workday and Microsoft Entra

• Ensure Workday login IDs and Microsoft Entra identities are mapped correctly (for example, UPNs or other identifiers used in SAML claims).
• If Workday uses a third-party IdP federated with Microsoft Entra, ensure the SAML claims from that IdP match what Workday expects.

7. Re-test the interview scheduling sign-in Once SSO is confirmed:

• From Workday, use the Sign In or schedule-interview action that should open Outlook/Calendar integration.
• The expected behavior is:
  • Workday redirects to Microsoft Entra (or the configured IdP) if not already authenticated.
  • Microsoft Entra prompts for sign-in or consent (if needed) and then returns to Workday.

If Workday still shows “Workday is not available” instead of redirecting:

• Re-check the Service Provider ID, Issuer, and IdP SSO Service URL alignment.
• Ensure the X.509 certificate in Workday matches the Microsoft Entra SAML signing certificate.

Because the context provided focuses on Workday–Microsoft Entra SSO and Employee Self-Service integration, the core requirement is a correctly configured SAML/OAuth trust between Workday and Microsoft Entra. Once SSO is working, Workday’s Outlook-based interview scheduling can rely on the same identity and calendar access.

References:

• Configure Workday for Single sign-on with Microsoft Entra ID
• Set up the simplified Workday integration for Employee Self-Service
• Integrate Workday with your Employee Self-Service deployment
• Set up the Interview schedule feature in the Dynamics 365 Human Resources Recruiting add-on