Workday provisioning flow fails with the following error visible in the Okta dashboard:

Automatic profile push of user <username> to app Workday failed: Unable to update personal info for Workday employee: Validation error occurred. Subject worker must have exactly one primary work email address in order to submit non-primary entries. The primary contact information may be either previously entered or included within this request

 

• Workday
• Provisioning
• Error

Workday writebacks are failing due to no primary information on the Workday profile, while Okta wrote back non-primary information. Within Workday, review the users referenced in the error message and verify that they have one of the primary attribute values stated in the error. 

Take a closer look at the error and the field mentioned after "Subject worker must have exactly one primary". If "work email address" is mentioned, it means that the user must have at least one primary work email address in Workday.If one is not set in Workday, the update from Okta will fail.

However, the value sent from Okta for "work email address" can also be sent as a primary. The attribute for the user's work email address in Workday can be found in Okta: "EmailAddressData Work EmailAddress," which has two more associated attributes: "EmailAddressData Work Primary" and "EmailAddressData Work Public". For more information, please check Workday - Task 2: Configure Okta documentation.

If "EmailAddressData Work Primary" is set to "true" for the user on their Workday application profile in Okta, then the "EmailAddressData Work EmailAddress" will be sent to Workday as a primary work email address and resolve the error. 

Other attributes, like phone number, will also have another associated attribute that allows it to be sent as primary to Workday if set to "true".