Workday plugin: the account, the email code and the six steps

Read on a real site on 2026-11-07, up to the "Create Account" page: the
/apply page, "Sign in with email", the sign-in and create-account forms by
data-automation-id, the robots-only field never to fill, and the mail from
myworkday.com for a verification code. The steps after sign-in are
Workday's usual form, said as such; docs/sites.md says the plugin has not
yet run on a real form.

Co-Authored-By: Claude Fable 5.1 <[email protected]>

docs/sites.md

@@ -16,7 +16,7 @@ What AIHawk can do on each site, from the real forms it has been run on. Posting
 | Workable (apply.workable.com) | ~35k | send clicked, not confirmed | One real form filled and sent: the button stayed on "Submitting…" beside an unticked Cloudflare box, and the browser was closed with no answer from the page. |
 | Paylocity (recruiting.paylocity.com) | ~228k | reaches the send button, not always | One real form of 5 steps filled in about 27 minutes, and the send button named. A later run stopped at 150 steps, and the next two reached the button, in about 10 and 8 minutes. No send has gone. |
 | Breezy (breezy.hr) | ~50k | sent and confirmed on a real form | One real send (one send only). |
-| Workday (myworkdayjobs.com, myworkdaysite.com) | ~1,481k | tried, no plugin | Needs an account on each company's site: a form stops at the sign-in unless you are signed in. Not tried on a real form. |
+| Workday (myworkdayjobs.com, myworkdaysite.com) | ~1,481k | plugin written, not yet run on a real form | Needs an account on each company's site. The plugin was written from a real site read on 2026-11-07 up to the "Create Account" page: it signs in or creates the account with the candidate's email and a Workday password from the answers, and reads a verification code from the mail when the site asks for one. The steps after sign-in come from Workday's usual form, not from a run. |
 | iCIMS (icims.com) | ~622k | tried, no plugin | Needs an account: a form stops at the sign-in unless you are signed in. Not tried on a real form. |
 
 Postings per status, in the index: sent and confirmed ~484k; reaches the send button, no send confirmed ~782k; stops at a captcha most or half of the time ~305k; tried with no plugin ~2,103k.

src/aihawk/plugins/workday.md

@@ -0,0 +1,26 @@
+---
+name: workday
+hosts: [myworkdayjobs.com, myworkdaysite.com]
+apply_path: /apply
+---
+A Workday form needs a candidate account on the company's own site: every company is a separate account, and the browser profile keeps each sign-in. The pages are one web app that redraws itself without changing address much, so after every click read the page again with browser_snapshot. Controls are best found by their `data-automation-id`, as `[data-automation-id="email"]`; the `id` attributes are numbered and change.
+
+The page at `/apply` is "Start Your Application" with `applyManually` ("Apply Manually"), `autofillWithResume`, `useMyLastApplication` and a LinkedIn frame: click `applyManually`. Do not use "Autofill with Resume", "Sign in with Google" or "Sign in with LinkedIn": the last two open another window that the tools cannot drive.
+
+Sign in or create the account. The step "Create Account/Sign In" shows `SignInWithEmailButton` ("Sign in with email"): click it. The sign-in form has `email`, `password`, `signInSubmitButton` ("Sign In"), `createAccountLink` ("Create Account") and `forgotPasswordLink`. If the answers give a Workday password, sign in with the candidate's email and that password; if the site says the account does not exist, click `createAccountLink`. The create form has `email`, `password`, `verifyPassword`, the checkbox `createAccountCheckbox` ("I agree", the terms and the privacy notice of the company) and `createAccountSubmitButton` ("Create Account"). The password rules are printed above the form: at least 8 characters with upper case, lower case, a digit and a special character. Use the Workday password from the answers for every company, so the candidate can sign in again; if the answers give none, call finish_form with status blocked and say that the person must add a line "Workday password: ..." to the answers, or press `l` and sign in to this company's site.
+
+Both forms carry a hidden text field `beecatcher` (name `website`, "This input is for robots only"): never type in it.
+
+A code sent by email. After "Create Account", or at sign-in, the site may ask to verify the email address with a code it sent. Workday's messages come from an address at `myworkday.com`, often `<company>@myworkday.com`: fetch the code as the mail instructions say, searching the sender domain `myworkday.com`, then come back to the form's address and type the code where the page asks for it.
+
+The steps after sign-in, shown in the progress bar: "My Information", "My Experience", "Application Questions", "Voluntary Disclosures", "Self Identify" on some sites, and "Review". Each step ends with `bottom-navigation-next-button` ("Save and Continue"), and the page lists its errors at the top in red when a required field is missing: read them and fix each field before clicking again. These steps were not read on a real form by this plugin's author: expect the fields below, and trust the page where it differs.
+
+My Information: "How Did You Hear About Us?" is a list (type, then choose an option), "Have you previously worked for ..." is a yes or no, then legal name (`legalNameSection_firstName`, `legalNameSection_lastName`), the address (`addressSection_addressLine1`, `addressSection_city`, `addressSection_postalCode`, with a region list on most countries), the phone (`phone-device-type`, a country code list, `phone-number`). Lists open on click and the option is chosen by clicking it, or by typing and pressing Enter; read the page to check the choice was taken.
+
+My Experience: work experience, education and skills are blocks added with "Add" buttons and are usually optional; leave them empty unless required, the CV says it. Upload the CV with the file input in the "Resume/CV" section, `[data-automation-id="file-upload-input-ref"]` or the `input[type="file"]` there, and wait until the file name shows. Websites and social links are optional.
+
+Application Questions: the company's own questions, mostly lists and yes or no, all usually required. Voluntary Disclosures and Self Identify: demographic questions with a "prefer not to say" or "I do not wish to answer" option, and a "Terms and Conditions" checkbox that is required.
+
+Review shows every answer; the send control is `[data-automation-id="bottom-navigation-next-button"]` there, labelled "Submit".
+
+After sending: the page says the application was submitted and offers the candidate home or more jobs; the address leaves `/apply`. If the Review page is still there with its "Submit" button, or errors show at the top, the application was not received.