Connecting Gemini Enterprise to Workday without UMSA - what's actually possible?
We're a Workday customer (Core HCM and Recruiting, no Payroll or Absence) with Gemini Enterprise as our company AI platform, and we're not on the UMSA. We've been exploring how to connect the two directly and are trying to separate what's real from what's marketing. Has anyone connected Gemini to Workday without going through Sana, and if so, how did you do it (custom MCP server, ADK agent, RaaS/WQL, iPaaS, something else)? Did you run into any licensing or contractual blockers along the way?
Our bigger question is scope: is this essentially a read-only data solution, or have you been able to initiate or approve transactions from Gemini, such as inbox approvals or business process steps, while keeping Workday security and approval chains intact? We're also curious what is possible without the UMSA, and whether Agent Gateway or Agent-Ready Tools access depends on it. Any lessons learned on security setup (ISU vs. per-user permissions), governance, or what you'd do differently would be hugely appreciated.