Connecting ADP Workforce Now

Last updated: May 14, 2026

Overview

Background

This article walks through the requirements and steps for connecting the ADP Workforce Now integration to Lumos.

Instructions

1. Click the ADP Workforce Now card in your Lumos integrations. (Reconnect or add new)

  1. Register your application with ADP to obtain a Client ID and Client Secret.

  2. Enable the following application scopes:

    Read (required):

    • /hr/workerInformationManagement/workerManagement/workerProfileManagement/worker.read

    Write (required for account provisioning and entitlement management):

    • /hr/workerInformationManagement/workerManagement/lifecycleManagement/worker.hire

    • /hr/workerInformationManagement/workerManagement/lifecycleManagement/worker.terminate

    • /hr/workerInformationManagement/workerManagement/lifecycleManagement/worker.rehire

    • /hr/workerInformationManagement/workerManagement/workAssignmentManagement/worker.workAssignment.modify

    • /hr/workerInformationManagement/workerManagement/communicationManagement/worker.businessCommunication.email.change

  3. Submit a CSR (Certificate Signing Request) to ADP and receive a signed X.509 certificate.

  4. Configure the SSL certificate and private key in the connector settings below.

  5. Use the Client ID and Client Secret from step 1 as the OAuth credentials.

For more details, see: https://developers.adp.com/getting-started/key-concepts/troubleshoot-app-integrations-with-adp

2. Click the Connect ADP Workforce Now button.


Capabilities

Functionality

Type

Sync

Provision

Description

Users

Account

User account records

Groups

Permission

Access control groups

Roles

Permission

Role definitions in Azure AD

AppStore

Offboarding

Access Reviews

License Management


Deprovisioning Action

Type

Description

Deactivate

User

Delete

User

Suspend

User

Setup Instructions

Example:

  1. Go to Settings > Integrations > Azure AD

  2. Click Connect

  3. Sign in with an admin account

  4. Approve the requested permissions

  5. Confirm the connection


Required Scopes

Scope

Required

Purpose

Why it’s Needed

read.directory.users

Read user profile data

To sync user information into Lumos

read.thisintegration.roles

Read roles

To display and manage role-based access