"Invalid Request": ISU Missing Domain Permission
The error SOAP-ENV:Client.validationError: Invalid request
What does "SOAP-ENV:Client.validationError: Invalid request" mean in Workday SOAP?
Despite what the message says, the request itself is probably fine. The ISU doesn't have the domain security permission for the web service operation it's calling, so Workday rejects it without explaining why.
Quick fix
Grant the ISU's security group the right domain access, activate pending security policy changes, and retry.
Permanent fix
One security group per integration with documented domain grants. Add a smoke-test call to the deployment checklist so permission gaps surface before go-live, not after.
Troubleshooting
- Find which web service operation the call uses - Get_Workers lives under Worker Data, for example.
- Run View Security for Securable Item on that operation to see which domain secures it.
- Check the ISU's security group and confirm it has Get (or Put, for writes) access on that domain in the right security policy.
- Activate pending security policy changes - a grant does nothing until you activate it.
- If it works in one tenant but not another, compare the security configs side by side.
Was this helpful?