When activating the Workday Securlet, after steps are followed in the tech notes, the message 'Securlet is not activated, because the authorizing user does not exist in CloudSOC'
Although the admin user in Workday and CloudSOC need to match up, CloudSOC will look for the 'Super Admin' of Workday. This is the user that needs to be added in CloudSOC. This user can be found by either:
Knowing who the super user of Workday is, or
Find the user being looked at in the Splunk logs, found via the reference error given.
Subscribing will provide email updates when this Article is updated. Login is required.