The Complete Dayforce Integration Guide

Dayforce (formerly Ceridian) is a powerful HCM platform, and your benefits data already lives inside it. The challenge is getting that data out of Dayforce and into your carriers, TPAs, and benefits vendors automatically, without someone running exports in between.

Connecting Dayforce to Benefit Cloud creates a secure, automated pipeline that does exactly that. Once the integration is configured, your employee data flows from Dayforce to your benefits ecosystem in the background, keeping carrier feeds current and eliminating the manual steps that introduce errors.

This is a one-time setup that your IT or HR Systems admin can complete in about 15 to 20 minutes. It requires admin-level access to Dayforce's System Admin area and a brief confirmation from your Ceridian Account Manager. Here is how it works.

Step 1: Confirm API Access Is Enabled on Your Instance

Dayforce's REST API capabilities (sometimes called Web Services) may need to be explicitly enabled on your instance. Before doing anything else, confirm this is active.

1. Contact your Ceridian Account Manager.

2. Ask them to confirm that Web Services and REST API access is enabled on your Dayforce instance.

3. If it is not yet enabled, request that they turn it on. This is sometimes a separately licensed feature, so mention that you need REST API access for a third-party benefits integration.

   
   

Do not proceed to the next steps until your Account Manager confirms this is active. Without API access enabled, the remaining steps will not work.

Step 2: Create a Dedicated Service Account

Rather than using an employee's personal login for the integration, create a new Dayforce user specifically for Benefit Cloud. A dedicated service account keeps the connection stable if staff changes occur and makes it easy to audit or revoke access later.

Suggested account names include svc-benefitcloud or benefitcloud-api.

1. Navigate to the User Management area in Dayforce System Admin.

2. Create a new user account using one of the suggested names above.

3. Note the username for the credential submission later.

   
   

Step 3: Assign a Role with Web Services Permissions

The service account needs a Dayforce role that grants API access. You can create a new role or modify an existing one. Here is how to configure it:

1. Navigate to System Admin and select Roles.

2. Open the Features tab and expand HCM Anywhere, then select Web Services.

3. Enable Read Data. Only enable Write Data if Benefit Cloud specifically instructs you to do so.

4. Under RESTful Services, enable field-level access for the data entities relevant to your integration. Benefit Cloud will let you know if any specific entities need adjustment.

5. Assign the configured role to the service account you created in Step 2.

   
   

Step 4: Choose Your Authentication Method

Dayforce supports two authentication methods for API access. Choose the one that best fits your organization's security requirements.

Option A: Basic Authentication

The simpler approach. Benefit Cloud authenticates using the service account username and password directly. You will need to provide the following:

• Username (the service account login)

• Password (the service account password)

• Client Namespace (the short identifier in your Dayforce URL: https://[namespace]-services.dayforcehcm.com/)

• Host URL (the full base URL of your Dayforce services endpoint)

  
  

Option B: OAuth 2.0 (Recommended)

The more secure approach. Instead of storing a password, Benefit Cloud uses short-lived access tokens. To set this up:

1. Register Benefit Cloud as an authorized application in Dayforce (typically in System Admin under API or Connected Apps settings).

2. Obtain the Client ID and Client Secret generated during registration.

3. Confirm the Token Endpoint URL for your instance.

4. Note your Client Namespace (same as above).

   
   

Step 5: Submit Credentials to Benefit Cloud

Submit your credentials securely through the Benefit Cloud portal at app.benefitcloud.io/resources/guides/integrations/dayforce. All values are encrypted immediately on submission. Do not share credentials over unencrypted email.

1. Log into the Benefit Cloud portal.

2. Navigate to Resources and select the Dayforce Integration Guide.

3. Complete the secure credential submission form with your company name, contact details, authentication credentials, Client Namespace, and Host URL.

4. Submit the form. Benefit Cloud will confirm receipt and begin testing the connection.

   
   

Step 6: Integration Complete

Once credentials are submitted, here is what happens next:

1. Benefit Cloud tests the API connection to your Dayforce instance.

2. Our team configures data mapping based on your feed requirements.

3. You receive confirmation once the integration is live.

4. Data syncs automatically on your agreed schedule from that point forward.

Ready to automate your benefits data?

Book a demo to get started with Benefit Cloud today.