WFM API Explorer Documentation
Learn how to set up WFM API access and use the API Explorer tool.
Getting Started with WFM API Access
Before using the API Explorer, API access will need to be configured in whichever tenant you plan on
running the APIs against. You will need to have:
- A user with the proper access created in the application
- An AuthN Client created that uses the Interactive/Password flow and grant type
Step 1: Create an API Client in WFM
You'll need administrator access to your WFM system to create an API client. Follow these steps:
-
1 Log into your WFM tenant
-
2Navigate to Administration Application Setup Common Setup Client Management
-
3 Click the 'Create' button
-
4Fill in the client details:
-
Name: Something descriptive like "API Explorer Tool"
-
Application Flow: Select "Interactive"
-
Grant Type: Select "Password Flow (ROPC)"
-
-
5 Save
Step 2: Create or Configure an API User
You'll also need a WFM user account with API access permissions:
-
1 Create a new user account or duplicate an existing one
-
2Assign appropriate access profiles and permissions
-
Function Access Profile: Super Access *
-
Roles (Edit Licenses): Manager, Employee
-
Licenses: Select a license for each product available (i.e. Hourly Timekeeping, Absence, Advanced Scheduling, etc.)
-
Step 3: Gather Required Information
Once you have your API client and user set up, collect the following information:
Client Configuration
Example: abc123def456
Example: xyz789uvw012
Example: org_PGHKngyxtxV6kU7Z
WFM User Account
Example: APIUSER
Keep this secure
Example: https://host.prd.mykronos.com
Step 4: Using the API Explorer
With your credentials ready, you can now use the API Explorer:
-
1Open the API Explorer Navigate to the API Explorer tool
-
2Enter Credentials Fill in all the fields in the "Global Configuration" section
-
3Authenticate Click "Authenticate" to verify your credentials
-
4Select Endpoint Choose an API endpoint from the dropdown menu
-
5Test API Calls Configure any necessary parameters as indicated on the page and click "Execute Request" to send the request and get the data back
Security Best Practices
Credential Storage
Non-sensitive information is temporarily cached in your browser session
Sensitive Data
Client Secret and Password are never stored and must be re-entered each session
Access Tokens
Authentication tokens are stored server-side and cleared on logout
Troubleshooting
Authentication Failed
- Verify all credentials are entered correctly
- Check that the hostname includes the protocol (https://)
- Ensure the API user account is active and has proper permissions
- Confirm the API client is properly configured in WFM
Connection Errors
- Verify the hostname URL is correct and accessible
- Check your network connection
API Permission Errors
- Check that your API user has the necessary permissions per the endpoint documentation
Need Help?
If you're still having trouble setting up API access: