Do you know why with SSO you still need to enter Microsoft credentials rather than accessing Workday the way Outlook or other applications with SSO are being accessed? Is it a Workday restriction (something that could be changed in the Tenant Setup) or if it's a configuration on the SSO Microsoft side?

Hi all, I'm currently working on a request from a customer where they want their leavers to have access to their tenant after termination. I know we can use the terminee as self security group and the domains required to give them access to their payslips and other docs. The problem is they do not want to utilize this feature as they have info sec concerns and some other quirks around their IT policy.

Curious to know if anyone has come across something similar and what was the outcome? I would like to provide an alternative but I'm not sure what is available. I did think of a request to send leavers payslips to their home email address automatically upon termination but I don't think this is available. Some Community posts were similiar but none were approved/actioned by Workday,

Thanks in advance for any suggestions!