specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
provider: Workday Security
providerId: workday-security
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - FinOps
  - FOCUS
  - Security
  - Identity
  - Workday
description: FinOps shape for Workday Security is opaque. API consumption is bundled with a
  negotiated Workday tenant subscription; there is no per-request meter, FOCUS-aligned cost export,
  or public usage-billing API.
sources:
  - https://www.workday.com/en-us/why-workday/about-us/contact-us.html
  - https://community.workday.com/api
notes: Workday does not expose a usage-billing API or FOCUS export for security-API consumption.
  Meters, charge categories, and unit economics cannot be reconciled without authenticated access
  to the customer's Workday Community documentation and contract.
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
publisherName: Workday, Inc.
serviceCategory: HR / Finance SaaS
billingModel:
  pricingCategory: Subscription
  billingFrequency: Annual
  billingCurrency: USD
  chargeCategories:
    - Purchase
focusColumns:
  ServiceName: Workday Security
  ServiceCategory: HR / Finance SaaS
  ProviderName: Workday
  PublisherName: Workday, Inc.
  InvoiceIssuerName: Workday, Inc.
  BillingCurrency: USD
meters:
  - name: tenant_subscription
    unit: month
    aggregation: sum
    dimensions:
      - tenant
principles:
  - name: Visibility
    description: No public usage API for security calls. Customers rely on the Workday Audit API
      and contract-level reporting to see authentication and security-event volume.
  - name: Allocation
    description: Costs allocate by Workday tenant and product subscription line; per-integration
      attribution requires capturing Integration System User identity in client-side telemetry.
  - name: Optimization
    description: Levers are integration-design choices (token caching, batched audit reads, SSO
      reuse) rather than rate or commitment discounts.
  - name: Accountability
    description: Workday subscription is owned by HR/IT procurement; security-API consumption is
      owned by the integrations and IAM teams that issue OAuth/ISU credentials.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com
    url: https://apievangelist.com