# Workato

![idwjRQfcbj_1733344695626.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416404877.png)
Workato is a cloud-based integration and automation platform that enables businesses to connect apps, automate workflows, and streamline processes without requiring extensive coding. It provides tools for building integrations across various applications, helping teams improve efficiency and collaboration.

In order to integrate Workato with Relyance AI you will need an **API Token** and **Data Center** link.

#### In Workato:

You will need to create an **API role** before creating the **API client**. Follow the steps below to do so.

![Workato-3.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433440591373.png)
1. Login to your Workato account.
2. Click on **Workspace Admin** found in the left-hand navigation.
3. Select the **API clients** tab and the **Client roles** section. In this page, click **+ Add client role**.
4. Provide a meaningful **Name** for the new client role (e.g. Relyance Scan).
5. Select **Projects** in the left-hand navigation.
6. Under the **Project assets** section in the **Recipes** and **Recipe Version** subsections select **List**.
7. Select **Tools** in the left-hand navigation.
8. Under the **Workspace data** section expand the **Lookup tables** subsection and select **List tables** and **List rows**.
9. Under the **Connector SDKs** section expand the **Connector SDKs** subsection and select **List** and **Search custom connectors**.
10. Select **Admin** in the left-hand navigation.
11. Under the **Workspace collaborators** section expand the **Collaborators** subsection and select **Get collaborators**.
12. Under the **Workspace details** section expand the **Workspace details** subsection and select **Get details**.
13. Under the **Environment Management** section expand the **Tags** subsection and select **List Tags**.
14. Click **Save changes** in the top right-hand corner.
15. Select the **API clients** tab and the **Api roles** section. In this page, click **+ Create API client**.
16. On this page provide: **Name**: A meaningful name (e.g. Relyance Scan) **Client role**: Select the previously created role **Project access**: Select all projects or specify the project in question **Allowed IPs** (optional): add the CIDR addresses from the article [Relyance AI IP Addresses for Allow Lists](/docs/integrations/relyance-ai-ip-addresses-for-allow-lists/)
17. Click the **Create client** button in the top right-hand corner.
18. Use the **Copy** button to copy the **API Token** in the resulting dialog to be used in Relyance.
19. Identify the **Data Center** you will be using according to your account: [https://docs.workato.com/workato-api.html#base-url](https://docs.workato.com/workato-api.html#base-url)

![Workato-1.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416409101.png)

![Workato-2.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416412045.png)

![Workato-4.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416420237.png)

![Workato-5.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416423565.png)

![Workata-6.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416426125.png)

![Workato-7.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416428045.png)

![Workato-9.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433440602637.png)
![Workato-8.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32433416431501.png)

![Workato-10.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32434373830797.png)

![Workato-11.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32434357561485.png)

![Workato-12.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32434357565709.png)

![Workato-13.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32434373839245.png)

#### In the Relyance AI application:

1. Login to your Relyance account.
2. Navigate to the **Settings** Menu in the bottom left-hand side.
3. Select **Integrations**.
4. Find the **Workato** integration card and click it to open its connections.
5. Under **Authentication Method**, choose **Property Scan**.
7. Paste the **API Token** into the **Bearer Token Field** and the Data Center into its field.

![Workato-14.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32434357568397.png)

8. Additional Features:
    - Use the **Vendor Discovery** checkbox if you wish to run this integration with Vendor Discovery Enabled.
    - Select the **Enable Data Inspection** checkbox if you wish Relyance also to inspect the data. For more information on Relyance features, please refer to this help center article: [here](/docs/introduction-to-relyance-ai/integration-features/).
9. Click **Authenticate**.
10. At this point, you should see the following result on the integrations page:

![Workato-15.png](https://assets.relyanceuat.xyz/images/docs/32433416445709/32434373841933.png)

11. Congratulations, you are now connected to **Workato**.

<!-- failure-modes:begin (generated from the integration catalog; do not hand-edit) -->

## If the connection reports Connected but returns nothing

These are the ways this integration comes back empty without reporting an error. Generated from the integration catalog, so it tracks what the connection actually asks for.

1. **A credential rotated at the vendor is not picked up here.** **Bearer Token** is stored when you save the connection, so regenerating the value at the vendor breaks the next scan until it is re-pasted here. Recording the expiry on the connection means Relyance warns you before it lapses.
2. **Check the address fields before suspecting the credentials.** **DSR Access URL** and **DSR Delete URL** identify which tenant, region or host to talk to. A wrong value there fails authentication and looks exactly like a bad secret.

<!-- failure-modes:end -->

<!-- auth-methods:begin (generated from the integration catalog; do not hand-edit) -->

## Authentication methods and fields

Pick one of these under **Authentication Method** on the connection wizard's **Authentication** step. This table is generated from the integration catalog, so it always matches what the form actually asks for.

| Method | Required | Optional |
| --- | --- | --- |
| **Custom API Integration** | `Authentication` | `DSR Access URL`, `DSR Delete URL`, `Name of Target Vendor`, `Name of Internal Service` |
| **Property Scan** | `Bearer Token` (secret), `Data Center` | — |

<!-- auth-methods:end -->

<!-- terraform-examples:begin (generated from the integration catalog; do not hand-edit) -->

## Manage this integration with Terraform

Connections for this integration can be managed as code with the [Relyance Terraform provider](https://registry.terraform.io/providers/Relyance/relyance/latest). Non-secret fields go in `auth.params`; secret fields go in `auth.secrets_wo`, which is write-only — never stored in Terraform state. Rotate secrets by bumping `auth.secrets_wo_version`.

### Custom API Integration

```hcl
resource "relyance_integration_connection" "workato_0" {
  vendor = "workato"
  name   = "<your connection name>"

  auth = {
    method = "custom-api-key"
    params = {
      authentication = jsonencode({})
      data_storage_location = "us"
    }
  }

  scans = { "data-inspection" = { enabled = true } }
}
```

### Access token

```hcl
resource "relyance_integration_connection" "workato_1" {
  vendor = "workato"
  name   = "<your connection name>"

  auth = {
    method = "access-token"
    params = {
      data_center = "<data_center>"
      data_storage_location = "us"
    }
    # Secret fields are write-only: sent to Relyance, never stored in state.
    secrets_wo = {
      bearer_token = var.workato_bearer_token
    }
    secrets_wo_version = 1
  }

  scans = { "data-inspection" = { enabled = true } }
}
```

<!-- terraform-examples:end -->