Cornerstone OnDemand Web Services

Inbound User/OU Web Services

Technical Specification

TABLE OF CONTENTS

TABLE OF CONTENTS ...... 2 INTRODUCTION ...... 3 SUMMARY ...... 4 ASSUMPTIONS ...... 5 ADDITIONAL REQUIREMENTS ...... 6 INITIAL SETUP ...... 7 TECHNICAL DETAILS ...... 11 TECHNOLOGY ...... 11 TRANSPORT LEVEL SECURITY ...... 12 AUTHENTICATION AND AUTHORIZATION ...... 12 CLIENT DATA SERVICES ...... 15 ECHOOUS ...... 17 ECHOUSERS ...... 21 RECONCILEOUS ...... 25 RECONCILEUSERS ...... 27 SETOUS ...... 29 SETOULOCAL ...... 32 SETUSERS ...... 38 GETUSER ...... 43 DATA DICTIONARY ...... 49 ORGANIZATIONAL UNIT ...... 49 LOCATION ...... 50 USERS ...... 51 LOAD AND TEST ...... 56 USERS ...... 56 OU HIERARCHIES ...... 56 REPORTS ...... 57 APPENDIX ...... 58 APPENDIX A – TIME ZONES ...... 58 APPENDIX B – COUNTRY CODES (ISO 3166-1) ...... 62 APPENDIX C – ERRORS ...... 66 APPENDIX D – LANGUAGE CODES ...... 67

INTRODUCTION The client data web services API is for clients seeking a way, to create and update users and organizational units’ records in the Cornerstone Talent Management System, directly from their system through web services.

Cornerstone Web Services Architecture:

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 3 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

SUMMARY This document gives a technical description of the following web service:

CLIENT DATA SERVICE:  EchoOus Send Organizational Units' payload and have it echoed back, validates XML payload against schema without loading into the system.  EchoUsers Send Users payload and have it echoed back, validates XML payload against schema without loading into the system.  ReconcileOus Deactivates Organizational Units based on latest modification date and allow reconcile flag set in the system.  ReconcileUsers Deactivates Users based on latest modification date and allow reconcile flag set in the system.  SetOus Create / Update Orgnanizational Units in the Cornerstone system.  SetOuLocal Create / Update Orgnanizational Units in the Cornerstone system.  SetUsers Create / Update Users in the Cornerstone system.  GetUser Retrieve User data from the Cornerstone system.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 4 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

ASSUMPTIONS The web service is made available at the specified URL and no client software is offered for its use. Developers can use this document as a guide to develop code to consume Cornerstone On Demand web services. It assumes that he or she is familiar with the following technologies:  XML (eXtensible Markup Language)  XSD (XML Schema Definition)  Web Services technology  WS Security

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 5 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

ADDITIONAL REQUIREMENTS The following are additional requirements associated to the User/OU web service:  XML files must be in UTF-8 format.  Blanks do not replace values: If a field in the request XML is blank (empty), that blank will not replace the existing value in the system. The existing value in the system will remain even after the request XML is processed.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 6 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

INITIAL SETUP

The web service account, which is the account that will be used in the authentication of the User/OU web services, should be setup prior to utilizing the web service. This setup will create a web service account, assign the web service account to a Division that does not have password expiration (if you do not want the web service account password to expire), place the web service account into the WS Administrator security role, and will create a password for the web service account. Failure to follow the below steps may result in the inability to make web service calls or cause the web service to cease after a certain period of time.

Step 1 – Contact your CSOD integration consultant to enable the web services security object. Without it being enabled, the web services will not function.

Step 2 – Login to your portal with administrator privileges.

Step 3 – Via Admin->Users->Add User, create the web service account. From the system perspective, this is just another user account. i. The User ID and Username must be of a value currently not used by any other user account in the system (must be unique). ii. The web service account must be Active.

iii. The web service account must have “Allow Reconciliation” de-activated.

iv. After entering in all of the necessary information in the user profile page, click the “Save” button. v. Proceed to then set the user’s password.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 7 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Step 4 – Assign the web service account to a Division that does not have password expiration. If you do not want the account password to expire, then you must assign the web service account to a Division that does not have password expiration. NOTE: if the web service account password expires, the web service would cease to function. Here are the steps in assigning the web service account to a Division that does not have password expiration. i. Via Admin->Users, go to the web service account user profile.

ii. Scroll down to where you would see the Division OU field. Note: Some clients prefer to rename their OU’s, so the Division OU may be named differently in the portal.

iii. Select a Division. If you do not want the web service account password to expire, you must select a Division that does not have password expiration.

iv. Click Save.

To check and see if a Division has password expiration enabled, go to Admin->Preferences-> Password Preferences (by Division)->Double click the web service account’s Division to take you to the Password Preferences page. If the text box after “Passwords expire every” is blank, then password expiration is not set for that division. The following is a sample screenshot:

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 8 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Note: If you do not want the web service account password to expire, but are unable to find a Division that does not have password expiration, then you will need to create the Division and assign that Division to the web service account. If you prefer to have the web service password expiration enabled, then you would need to change the password prior to the expiration date, so that the password does not become invalid/expired.

Step 5 – Assign the web service account to the "WS Administrator" (ID = WSAdmin) security role. If the web service account is not in this role, the web service integration will not work.

Step 6 – Login to the portal with the web service account login & password.

Step 7 – You will be prompted to change your password. Proceed to change the password. Store that password in a safe place, because it will be used in the web service calls (except for Catalog Search and Get Details). The password should be kept private and not shared with Cornerstone personnel.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 9 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Step 8* – Enable the GetUser web service: i. Notify the CSOD Integration Consultant that you are planning on utilizing the GetUser web service. ii. The Integration Consultant will have his/her engineer enable the two web services for you. * This step is only necessary if you are planning on using the GetUser web service operation.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 10 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

TECHNICAL DETAILS

Technology Cornerstone On Demand web services are built on the Simple Object Access Protocol model SOAP 1.1 and SOAP 1.2. SOAP 1.1 was adopted by W3C in May of 2000, SOAP 1.2 in June 2003. What is SOAP?  SOAP stands for Simple Object Access Protocol  SOAP is a communication protocol  SOAP is for communication between applications  SOAP is a format for sending messages  SOAP communicates via Internet  SOAP is platform independent  SOAP is language independent  SOAP is based on XML  SOAP is simple and extensible  SOAP allows you to get around firewalls  SOAP is a W3C recommendation

SOAP BUILDING BLOCKS A SOAP message is an ordinary XML document containing the following elements:  An Envelope element that identifies the XML document as a SOAP message  A Header element the contains the header information  A Body Element that contains the call and response information  A Fault element containing errors and status information

Skeleton SOAP Message

...

... STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 11 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

...

Transport Level Security Cornerstone On Demand Web Services use Secure Sockets Layer (SSL) protocol, the established Web tier technology, to secure and encrypt the data as it is transmitted between Cornerstone servers and the caller.

Authentication and Authorization Cornerstone On Demand web services employ SOAP Message security 1.1 specification, WS- Security 2004. This is an OASIS specification, the result of work by the WSS Technical Committee, and adopted by all major players in the Web Services technology realm, IBM, Microsoft and Sun. WS-Security specification uses the following namespaces:

http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity263 secext-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity265 utility-1.0.xsd http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd

WS-Security security related information is attached to the SOAP message through a block in the header. Cornerstone Web Services implement the UserName Token element from WS-Security specification, to convey authentication credentials to the system. STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 12 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

[corpname]\[WebServiceAccount] password

The UserName token consists of the client’s portal name (denoted as [corpname] throughout this document) and Username. The [WebServiceAccount] should be web service account. This is the user account that will be used to login and access the CSOD web service. The password should be the password that is set for the web service account. See the Initial Setup section on the required setup of the web service account.

Note: CSOD does not support hashed passwords for web service authentication.

A security header will be included in the SOAP response that is sent from the CSOD web service.

Some of the example SOAP responses in this data feed web services document are simplified versions of the messages, just to illustrate what it would look like. They are not meant to be the actual schemas of the messages—it’s focus is more so on the payload, not the headers. If you look closely at the schema references, you will notice there are several missing. All the ws-* references are not there.

The actual references are: STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 13 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

When the SOAP response is successful, the returned HTTP status would always be 200. When there is an exception, the HTTP status would be 500 (in most cases), however it can potentially be 400 or 401 in case of bad requests.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 14 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

CLIENT DATA SERVICES

The Client Data Services are located at the following end points: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

The Web Services Description Language (WSDL), can be retrieved at the following URL’s: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx?WSDL Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx?WSDL Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx?WSDL

Where [corpname] denotes the client’s portal name.

Note: Each User web service call supports a maximum of 500 User records. Each OU web service call supports a maximum of 500 OU records.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 15 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

If there’s a need to load more than 500 records, there would need to be additional web service calls to accommodate that.

For example, to load 1,100 users, there should be three calls of the SetUsers web service: First call to load 500 users. Second call to load 500 users. Third call to load 100 users.

Same rule would apply to OU’s.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 16 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

EchoOus

Description The EchoOus operation gives you the ability to send an organizational units XML payload to the server to validate your message against the schema. The server echos your XML payload back to you in the exact format you send it, if the message passes validation successfully. If the schema is violated the server will respond back with an exception with a message describing the error.

SoapMessage The EchoOus message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document).

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

Request Message Format [CORPNAME]\[WEBSERVICEACCOUNT] password STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 17 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

939 Bellevue Way NE Bellevue WA 98004
300 3rd Ave W Seattle WA

Request Body Format String String String String String String STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 18 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Fields

See Data Dictionary

Response Message

Errors are reported back in exception in a SOAP fault exception message:

xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext- 1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity- utility-1.0.xsd">

http://schemas.xmlsoap.org/ws/2004/08/addressing/fault urn:uuid:955fb0fe-8107-44d0-b068- b547aa19732b urn:uuid:ff60681e-177e-4aaf-9035- b23768aabd3f

http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous 2010-09-07T18:56:13Z 2010-09-07T19:01:13Z q0:Security UsernameToken is expected but not present in the security header of the incoming message. http://ceblearningcenter-stg- int.csod.com:81/feed30/clientdataservice.asmx

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 20 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

EchoUsers

Description The EchoUsers operation gives you the ability to send an users XML payload to the server to validate your message against the schema. The server echos your XML payload back to you in the exact format you send it, if the message passes validation successfully. If the schema is violated the server will respond back with an exception with a message describing the error.

SoapMessage The EchoUsers message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document).

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

Request Message Format 2010-03-27T00:00:20.292Z 2010-03-27T00:05:20.292Z [CORPNAME]\[WEBSERVICEACCOUNT] password

P. Dept Police St P.O. Bike CH.C. Union O. Time NO Male Caucasian

Request Body Format String String String String String String String STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 22 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

String String Not Known String String

Fields

See Data Dictionary

Response Message string

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 23 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

string string Not Known or Male or Female or Not Specified string string string

string string Not Known or Male or Female or Not Specified string string

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 24 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

ReconcileOus

Description The ReconcileOus operation gives you the ability to deactivate a set of records based on a last modification date in the system. The operation works in conjunction with the Allow Reconcile flag in the system. A record must meet the following criteria to be deactivated: 1. It must be active 2. It must have the allow reconcile flag set to true 3. It’s creation date or modify date < TimeStamp

SoapMessage The ReconcileOus message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document).

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

Request Message Format 2010-03-27T00:00:20.292Z 2010-03-27T00:05:20.292Z [CORPNAME]\[WEBSERVICEACCOUNT] STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 25 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

password 2001-12-17T09:30:47.0Z String

Request Body Format 2001-12-17T09:30:47.0Z String

Fields Field Size/Format Description TimeStamp VARCHAR(20) UTC / GMT time Format: YYYY-MM- DDTHH:MM:SS Type VARCHAR(100) Type of Organizational Units to deactivate. I.e. Division, Location, Cost Center, or any custom OU type.

Response Message STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 26 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

ReconcileUsers

Description

The ReconcileUsers operation gives you the ability to deactivate a set of user records based on the last modification date in the system. The operation works in conjunction with the Allow Reconcile flag in the system. A record must meet the following criteria to be deactivated: 1. It must be active 2. It must have the allow reconcile flag set to true 3. It’s creation date or modify date < TimeStamp

SoapMessage

The ReconcileUsers message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document).

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

Request Message Format STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 27 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

2010-03-27T00:00:20.292Z 2010-03-27T00:05:20.292Z [CORPNAME]\[WEBSERVICEACCOUNT] password 2001-12-17T09:30:47.0Z

Request Body Format 2001-12-17T09:30:47.0Z

Fields Field Size/Format Description TimeStamp VARCHAR(20) UTC / GMT time Format: YYYY-MM- DDTHH:MM:SS

Response Message

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 28 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

SetOus

Description SetOus allows you to perform insert and update operations on Organizational Units in the Cornerstone system. SetOus uses the OU ID, the client’s internal identifier for the OU to locate the records. If the record is located it is updated, if a record is not found it is inserted.

Note: Prior to calling the SetOus web service, ensure the “Required on Soap Feed” checkbox is checked for the OU in the “Edit OU Type” page (screenshot below). If you are unsure how to access this page, check with your CSOD consultant.

SoapMessage The SetOus message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document).

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 29 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

If the Parent OU ID does not reference a valid OU ID in the CSOD portal, the response will indicate an error for that particular record. The OU record itself will still attempted to be created and the Parent OU value will be blank (the UI will show the Parent OU as the client name).

Sample Response of the error:

Request Message Format STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 30 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

2010-03-27T00:00:20.292Z 2010-03-27T00:05:20.292Z [CORPNAME]\[WEBSERVICEACCOUNT] password

Request Body Format String String String String String String STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 31 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Fields

See Data Dictionary

Response Message

SetOuLocal

Description SetOuLocal allows you to perform insert and update operations on Organizational Units with localized OU data in the Cornerstone system. If the record is located it is updated, if a record is not found it is inserted.

Examples of localized OU data fields are the OU’s Title, Description, and custom fields (e.g. “Localized Short Text Box” and “Localized Scrolling Text Box”).

SoapMessage The SetOuLocal message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document). STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 32 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

HTTP Request with Headers

HTTP Method: POST

Headers

SoapAction: SetOuLocal

Content-Type: text/xml STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 33 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Data Fields sent to CSOD when calling the SetOuLocal operation: Data Field Type Mandatory? Description

Id String Mandatory OU ID

Parent String Optional OU ID of the Parent OU

Name String Optional Name/Title of the OU

Type String Mandatory Type of the OU (e.g. Division, Location)

Active String Optional To Make OU Active value= (true/false)

AllowReconcile String Optional To Allow Ou to Reconcile value= (true/false)

Title String Mandatory Localized Title for OU

Description String Mandatory Localized Description for OU

Culture String Mandatory Culture of Title & Description for OU

TimeZone String Optional Locality - if Ou type is Location

CountryCode String Optional Locality->Address - if Ou type is Location

Line1 String Optional Locality->Address - if Ou type is Location

Line2 String Optional Locality->Address - if Ou type is Location

MailStop String Optional Locality->Address - if Ou type is Location

City String Optional Locality->Address - if Ou type is Location

State String Optional Locality->Address - if Ou type is Location

PostalCode String Optional Locality->Address - if Ou type is Location

Name String Optional Custom Field Name Optional for Non- Culture String Localized field Custom Field Culture type

Data Fields returned: Data Field Type Description

Id String OU ID STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 34 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Parent String OU ID of the Parent OU

Sample Request

portal\validusername validpassword

Line1updated Line2updated MailStopupdated Cityupdated Stateupdated PostalCodeupdated
oucustomfield1 Donaghy Ave US cf3 10151_2000updated oucustomfield1 Donaghy Ave London cf4 10151_2000updated Automation STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 35 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Success

An example response to a successful request:

SetOuLocalResponse urn:uuid:ccd30df2-af99-4dbc-a113- c66186007988 urn:uuid:680e5e4e-3cf4-420f-a9e3- 6e8fb2259982 http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymo us 2016-01-12T14:53:22Z 2016-01-12T14:58:22Z

Failure (Exception)

An example response to a failed (exception) request: STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 36 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

SetOuLocalResponse urn:uuid:a66ff2fb-df19-4be2-b090- dbb03fe92756 urn:uuid:488526a3-c5e5-4521-ba26- ff3a1810f6ec http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymo us 2016-01-12T15:19:32Z 2016-01-12T15:24:32Z Culture 'en-U' for Title 'USA 001 OU' and Description 'Location Division USA US 001 OU' is invalid culture

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 37 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

SetUsers

Description SetUsers allows you to perform insert and update operations on users in the Cornerstone system. SetUsers uses the User ID, the client’s internal identifier for the user to locate the records. If the record is located it is updated, if a record is not found it is inserted. SetUsers also supports the GUID for clients that utilize ATS. The GUID is represented by the CsodGuid tag in the User Id XML element.

Note the following: - Users created via the SetUsers web service operation will have a default password as specified in the corporate settings. Furthermore, the default password that would be set for a User/OU feed would also apply for the User/OU web service, and vice versa. - Only the following custom field types can be loaded: o Short Text Box o Scrolling Text Box o Checkbox o Dropdown o Date field o Numeric field o Radio Button - We do not support the following field types: o Branched Dropdowns o Hierarchy o Multiple Checkbox

SoapMessage The SetUsers message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document).

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 38 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

Request Message Format 2010-03-27T00:00:20.292Z 2010-03-27T00:05:20.292Z [CORPNAME]\[WEBSERVICEACCOUNT] password

P. Dept Police St P.O. Bike CH.C. Union O. Time NO Male Caucasian STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 39 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Request Body Format string

string string Not Known or Male or Female or Not Specified string string string STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 40 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

string string Not Known or Male or Female or Not Specified string string

Fields

See Data Dictionary

Response Message

Username Functionality: STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 41 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

For new users that are going to be added to the system or current users that have a blank User Name in the UI, if the username XML tag is not sent for the user, the User Name field in the User Profile in the UI will not be modified at all. Example from a request XML (note there is no username tag): [email protected]

321 Pacific Coast Highway Santa Monica CA 90404
FAE 7 30003106 34567890 test value 1

If the username XML tag is sent for a user but it’s empty (no value), then the value in the User Name field in the User Profile in the UI will populate with the user’s User ID (example is below). Example from a request XML (note the highlighted username tag with no value): [email protected]

321 Pacific Coast Highway Santa Monica CA 90404
STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 42 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

FAE 7 30003106 34567890 test value 1

GetUser

In order to use the GetUser web service, CSOD needs to enable the web service in the client’s portal. The client must notify CSOD that they are planning to use the GetUser web service so that CSOD can enable it. The rest of the User/OU web services are already enabled by default.

Description The GetUser operation allows the client to get their user information from their Cornerstone system. The web service request accepts the user’s Username, User ID, or Email Address. The data returned reflects all of the below mentioned fields related to a particular users’ record found within the portal.

Data is available on-demand based on when the client requests it. All business rules configured in the portal are observed by this operation. You can also get multiple user information by providing multiple comma separated usernames, User ID’s, and/or email addresses in the below request.

The value in the strUserID element (in the Body) will cause the system to check a user’s User ID value to see if it matches, if it doesn’t, then the system will check the user’s Username value, if a match is still not found, the system will check the user’s Email address value, if no match is STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 43 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

found, the system will iterate to the next user in the portal until a matching user is found or until the system reaches the end of the list of users (matching user is not found). Thus, to prevent unexpected results, it is advisable that all User ID, Username, and Email values be unique and neither value have commas within them. Note the following: - Custom OU and custom field data (including Encrypted Short Textbox) associated to the user will be passed in the response. - The GetUser operation cannot request information on default CSOD accounts In other words, the GetUser operation will work on all user accounts except the default CSOD accounts.

SoapMessage The GetUser message is a SOAP message with a HEADER and a BODY. The prescribed Header will require populating with authentication details of the web service account (details on how to setup that account is in the “Initial Setup” section earlier in this document).

These values are in plain text format with the transport protocol of HTTPS handling the securing. The Body will specify the client Corporation and the Username of the Cornerstone user whose details are to be returned. It will also specify the parameters of the request.

As mentioned in the Client Data Services section, the web service is at the following end point: Live: https://ws-[corpname].csod.com/feed30/clientdataservice.asmx Stage: https://ws-[corpname]-stg.csod.com/feed30/clientdataservice.asmx Pilot: https://ws-[corpname]-pilot.csod.com/feed30/clientdataservice.asmx

Request Message Format [CORPNAME]\[WEBSERVICEACCOUNT] password STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 44 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

iluciano

Request Body Format string

Request Fields Field Name Type Description strUserID String Reflects a user within the client’s Cornerstone User population. This value can be the user’s User ID, User Name, GUID, or email address. To get multiple user information, multiple User ID, User Name, or email address must be passed as comma separated values. For example: user1,user2,user3

Response Fields Data Field Type Description Username String Username of the user GUID String User’s GUID. This is a CSOD generated unique identifier of the user. Active True/False Boolean Status of the user. true = Active false = Inactive Absent True/False Boolean Indicates whether the user STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 45 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

is Absent or not. true = Absent false = not Absent Allow Reconcile True/False Boolean True = user reconciliation is active. False = user reconciliation is inactive. Deep Link Base URL String Indicates the BaseURL of the user. Used for Deeplinking purposes. Language Enum Language of the user User Enum Time zone of the user Prefix String Prefix of the user First Name String First name of the user Middle Name String Middle name of the user Last Name String Last name of the user Suffix String Suffix of the user Phone Int Telephone number of the user Fax Int Fax number of the user Country Code String Country code of the user Line 1 String Address Line 1 value of the user Line 2 String Address Line 2 value of the user City String City of the user State/Province String State of the user Postal Code Int Postal code of the user Division ID String Division OU ID of the user Location ID String Location OU ID of the user Position ID String Position OU ID of the user Cost Center ID String Cost center ID of the user Grade ID String Grade ID of the user Last Hire Date Date Last Hire date of the user. Format: YYYY-MM-DD Original Hire Date Date Original Hire date of the Format: YYYY-MM-DD user. Required Approvals Int Required Approvals of the user Approver ID String Approver ID of the user Manager ID String Manager ID of the user Gender String Gender of the user Ethnicity String Ethnicity of the user Active after Date Date Date user will be or was STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 46 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Format: YYYY-MM-DD auto-activated. Field Name (attribute) String Name of the field. Field Name (value) String Value of the field. If the field type is Checkbox, then the value returned will be Yes (representing checked) or No (representing unchecked). If the field type is multiple checkbox, then the value returned will be the values associated to the checked checkbox(es). If multiple checkboxes have been checked, then the values would be separated by a comma.

Response Message GetUserResponse urn:uuid:702d249c-893b-4c8d-9f34- 03d35034b816 urn:uuid:1c26f5e2-bc81-4e73-a261- 5c1a236d5c43

http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous 2013-08-14T15:04:55Z 2013-08-14T15:09:55Z

AllowReconcile="false" Language="en-US" UserTimeZone="(GMT-08:00) Pacific Time (US & Canada)" DeepLinkBaseURL="">

auto ws admin iluciano No AZ CF 3 - Option 1 (US) AC CF 5 - Option 1 (US), AC CF 5 - Option 2 (US) Not HR Advisor

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 48 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

DATA DICTIONARY The tables below and their corresponding spreadsheets show the form in which data must be submitted.

Required attributes are bolded and italicized. All other fields are optional and do not need to be included as part of data feed. The shaded columns on the spreadsheets are required entries. Any field of type “Enum” must be formatted and capitalized exactly as defined by the description.

Organizational Units (OU) include: Division, Position, Grade, Cost Center, or any customer- preferred label. Location OU has its own specification on the following page.

Organizational Unit

Element Attribute Type Size Description Organizational Id String 100 Required: Uniquely-assigned identifier. Unit Name String 1000 Required: Name of the OU. Parent String 100 Identifier of the containing parent to indicate a hierarchical structure. Owner String 50 User-identifier of the person who has ownership of this object. Active Boolean Indicates that the organizational unit is available for workflow operations, such as: assigning costs, administrative procedures, authentication. Acceptable values for this field are “true” or “false”.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 49 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Location

Element Attribute Type Size Description Location Id String 100 Required: Uniquely-assigned identifier. Name String 1000 Required: Name of the Location OU. Parent String 100 Identifier of the containing parent to indicate a hierarchical structure. Optional. Active Boolean Indicates that the organizational unit is available for workflow operations, such as: assigning costs, administrative procedures, authentication. Acceptable values for this field are “true” or “false”. Address Country Enum Required: A 2-letter or 3-letter code that Code indicates the country. All codes MUST be conformant with ISO 3166-1. (See http://www.iso.org/iso/en/prods- services/iso3166ma/index.html ) Refer to the Country Code table in the back of this document for format information. Line1 String 55 First formatted-address line. Typically SHOULD contain: Street number and name, or rural route, or highway.

(Example: 2250 Ocean Park Blvd.) Line2 String 55 Second formatted-address line. Typically SHOULD contain: P.O. Box, Suite, or office number

(Examples: Suite 225 P.O. Box 2259) Mailstop N/A N/A Not used. This attribute will be removed by CSOD in the future. City String 35 City Name. (Example: Santa Monica) State String 30 State or Province Name. STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 50 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Element Attribute Type Size Description PostCode String 20 Zip code or post office zone routing code. (Examples: 90405 or V4G 1E2) Time Zone TimeZone 3-4 Required: 3 or 4-letter code (see Time Zones table following Data Dictionary). If this is not provided, we can feed a single default time zone to apply to all location OUs and accommodate the need to change it manually.

Users

Element Attribute Type Size Description User Id String 100 Required: Uniquely-assigned user identifier. Usually, this number is the employee number in the client’s HR system. On occasion, a security identifier has been used. Active Boolean Indicates that the user is able to access the system. Typically, terminated employees have this attribute set to “false”. Acceptable values for this field are “true” or “false”.

Note: If this XML tag is not present in the request, then the Active value will default to “true”. Absent Boolean Indicates that the user is on leave, and all workflow requests in Cornerstone will be put on hold or routed to alternate users. Acceptable values for this field are “true” or “false”. ActivePeriod Boolean Allows the ability to activate or deactivate a user based on the active period. Acceptable values for this field are either “true” or “false”. STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 51 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Element Attribute Type Size Description ActivationDate Date The format is “YYYY-MM-DD”. DeactivationDate Date The format is “YYYY-MM-DD”. ActivePeriodTimeZone ENUM Indicates the time zone to which the user would be activated/deactivated. See Appendix A for list of possible time zone values. AllowReconcile Boolean Indicates that the user can be reconciled after the Data Feed is run. If this box is set to “true”, the system will automatically deactivate this user if the user is not present in the latest user data file. Acceptable values for this field are “true” or “false”. Language Enum This is the user’s display language in the portal and will overwrite any existing language that may have been selected for/by the user. The portal must have the language’s Language Pack enabled in order for the user to have that particular language selected. See Appendix D for list of language codes. If you plan on utilizing this field, notify your integration consultant so that they can activate it in your portal. DeepLinkBaseURL String 200 Indicates the BaseURL of the user. Used for Deeplinking purposes. Contact Categorically groups all contact- related data. Name Prefix String 10 Can be any string. Typically, is set to “Mr.”, “Ms.”, “Mrs.”, “Dr.”, etc. First String 200 Required: The first-name. Middle String 200 The middle-name or the initial. Last String 200 Required: The last-name. Suffix String 10 The name-suffix. Typically set to “PhD.”, “M.D.”, “Jr.”, etc… Email String 128 SMTP email-address of the user. STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 52 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Element Attribute Type Size Description Must conform to the RFC-822 specification. Phone Work String 25 A formatted phone number. May contain international country-codes, no data validation is provided. Home String 25 A formatted phone number. May contain international country-codes, no data validation is provided. Mobile String 25 A formatted phone number. May contain international country-codes, no data validation is provided. Fax String 25 May be one of: “Work”, “Fax”, “Home”, or “Mobile”. Note: Only one of each type may be present. Work Address CountryCode Enum Required: A 2-letter or 3-letter code that indicates the country. All codes MUST be conformant with ISO 3166- 1. Refer to the Country Code table in the back of this document for format information. Line1 String 55 First formatted-address line. Typically SHOULD contain: Street number and name, or rural route, or highway.

(Example: 2250 Ocean Park Blvd.) Line2 String 55 Second formatted-address line. Typically SHOULD contain: P.O. Box, Suite, or office number

(Examples: Suite 225 P.O. Box 2259) City String 35 City Name. (Example: Santa Monica) State String 30 State or Province (Example: CA or California) STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 53 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Element Attribute Type Size Description Postal Code String 20 Zip code or post office zone routing code. (Examples: 90405 or V4G 1E2) Required Approvals Integer 0-3 Number of approvals required to purchase training. Overrides the required approvals set by the user’s OU membership. Organizational Division String 100 User’s Division ID. Units (OU) Location String 100 User’s Location ID. Position String 100 User’s Position ID. Cost Center String 100 User’s Cost Center ID. Grade String 100 User’s Grade ID. Custom String 100 ID to User’s Custom Organizational Organizational Unit Unit. Employment Months Of Service Integer Total number of months of active employment. Used by some clients to determine eligibility for certain training or certification. Status Enum Must be one of:  Not Known  Active  Terminated  On Leave Classification Enum Must be one of:  Exempt  Non-Exempt Last Hire Date Date The date this employee was most recently hired. The format is “YYYY- MM-DD”. Original Hire Date Date The date this employee was originally hired into the organization. The format is “YYYY-MM-DD”. Approver String 100 WARNING: A circular refernce1 here will break the User feed

1 A circular reference (not supported) is where A reports to B who reports to C who reports back to A. STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 54 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Element Attribute Type Size Description

User-Identifier of the user’s approver. If specified, overrides any approval rules obtained from OU membership. Manager String 100 WARNING: A circular refernce2 here will break the User feed

User-Identifier of the user’s direct supervisor. Gender Enum MUST be one of:  Not Known  Male  Female  Not Specified (Based on ISO gender specification rules.) Ethnicity String 50 Can be any value. Username String 128 Login credential.

2 A circular reference (not supported) is where A reports to B who reports to C who reports back to A. STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 55 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

LOAD AND TEST

Once the data has been loaded, you can perform some simple tests in the application to validate that the data has been loaded properly. There are steps below on how to test each data set  Have the users correctly been loaded in the system? (steps to test below)  Is the Org Unit (OU) hierarchy correct? (steps to test below)  Which reports can be used to test? (steps to test below)

Users View all User records in the portal. Follow these steps to test: - Log in to your portal as a system administrator - Navigate to Admin > Users - Click the ‘Search’ button (do not filter) - Expected Result: View all users and their profile in the portal. Ensure user meta-data in the user profile are correct.

OU Hierarchies View all OU records in the portal. Follow these steps to test: - Log in to your portal as a system administrator - Navigate to Admin > Organizational Units - Click the ‘Manage Organizational Unit Hierarchy’ link - Select an Organizational Unit from the dropdown - Expected result: View all OU’s selected and ensure that the OU data is correct.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 56 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Reports View OU Hierarchy and Users in report. Follow these steps to test: - Log in to your portal as a system administrator - Navigate to Reports > Standard Reports > System - Select ‘OU Hierarchy’ report to view OU’s - Select ‘Users OUs & Groups’ report to view Users - This will generate a report of OUs and their hierarchies; and Users

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 57 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

APPENDIX

Appendix A – Time Zones

Users are associated with a particular timezone in the system based on the following rules.

The time zone rules are applied in this order:

1. User Record: If there is a timezone value set on the User Record, this is the timezone that will display when the user logs into the portal. The default value on the User Record is ‘Please Select’. The timezone value must be explicitly set by user or the system administrator. If no value is set on the User Record, when the user logs into the portal, timezone will be set by the next system rule (Location OU). Note about the feed: The timezone value on the User Record should be changed manually; a user’s timezone cannot be in the user Inbound Data Feed file. The system administrator can allow users to select their timezone preference by navigating to Admin > Preference > System Preference > Timezone Preferences. Check the “Allow users to change timezone checkbox” to allow users to change timezone from My Account.

2. Location OU: A user can be associated to a Location organizational unit (OU). The Location OU has a value for timezone. If a user record has no value explicitly set on the User Record, when the user logs into the portal timezone will be set by the value on the Location OU. Note about the feed: The timezone value for Location OU can be set manually, or the timezone value can be fed into the system as part of the Location OU data feed file.

3. Timezone Preference (by Division): A user can be associated to a Division organization unit (OU). The default value under the “Admin > Preference > System Preference > Timezone Preferences (by Division)” will display when a user logs into the portal if no timezone value is set on the User Record or the Location OU. Note about Timezone Preference (by Division): The system defaults to using the Timezone Preference (by Division). To change the system default in your portal to use Timezone Preference (by Location) please contact Global CARE Support.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 58 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

This appendix lists the acceptable Time Zones codes. For code entries separated by a “pipe”, the client has the option of sending either value. For example, the code for Hawaiian Standard Time will accept either “3” or “HST” as indicated in the Code(s) column as “3|HST”.

Code(s) Name Description UTC DST Offset Offset (Minutes) (Minutes)

1 Dateline Standard Time (GMT-12:00) International Date Line West -720 0 76 UTC-11 (GMT-11:00) Coordinated Universal Time-11 -660 0 2 Samoa Standard Time (GMT-11:00) Samoa -660 60 3|HST Hawaiian Standard Time (GMT-10:00) Hawaii -600 0 4|AST Alaskan Standard Time (GMT-09:00) Alaska -540 60 77 Pacific Standard Time (Mexico) (GMT-08:00) Baja California -480 60 5|PST Pacific Standard Time (GMT-08:00) Pacific Time (US & Canada) -480 60 6|PNT US Mountain Standard Time (GMT-07:00) Arizona -420 0 78 Mountain Standard Time (Mexico) (GMT-07:00) Chihuahua, La Paz, Mazatlan - New -420 60 7 Mexico Standard Time 2 (GMT-07:00) Chihuahua, La Paz, Mazatlan - Old -420 60 8|MST Mountain Standard Time (GMT-07:00) Mountain Time (US & Canada) -420 60 9 Central America Standard Time (GMT-06:00) Central America -360 0 10|CST Central Standard Time (GMT-06:00) Central Time (US & Canada) -360 60 79 Central Standard Time (Mexico) (GMT-06:00) Guadalajara, Mexico City, Monterrey - New -360 60 11 Mexico Standard Time (GMT-06:00) Guadalajara, Mexico City, Monterrey - Old -360 60 12 Canada Central Standard Time (GMT-06:00) Saskatchewan -360 0 13 SA Pacific Standard Time (GMT-05:00) Bogota, Lima, Quito -300 0 14|EST Eastern Standard Time (GMT-05:00) Eastern Time (US & Canada) -300 60 15 US Eastern Standard Time (GMT-05:00) Indiana (East) -300 0 80 Venezuela Standard Time (GMT-04:30) Caracas -270 0 81 Paraguay Standard Time (GMT-04:00) Asuncion -240 60 16|PRT Atlantic Standard Time (GMT-04:00) Atlantic Time (Canada) -240 60 82 Central Brazilian Standard Time (GMT-04:00) Cuiaba -240 60 17 SA Western Standard Time (GMT-04:00) Georgetown, La Paz, Manaus, San Juan -240 0 18 Pacific SA Standard Time (GMT-04:00) Santiago -240 60 19 Newfoundland Standard Time (GMT-03:30) Newfoundland -210 60 20 E. South America Standard Time (GMT-03:00) Brasilia -180 60 83 Argentina Standard Time (GMT-03:00) Buenos Aires -180 60 21 SA Eastern Standard Time (GMT-03:00) Cayenne, Fortaleza -180 0 22 Greenland Standard Time (GMT-03:00) Greenland -180 60 84 Montevideo Standard Time (GMT-03:00) Montevideo -180 60 STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 59 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Code(s) Name Description UTC DST Offset Offset (Minutes) (Minutes)

85 UTC-02 (GMT-02:00) Coordinated Universal Time-02 -120 0 23 Mid-Atlantic Standard Time (GMT-02:00) Mid-Atlantic -120 60 24 Azores Standard Time (GMT-01:00) Azores -60 60 25 Cape Verde Standard Time (GMT-01:00) Cape Verde Is. -60 0 86 Morocco Standard Time (GMT) Casablanca 0 60 87 UTC (GMT) Coordinated Universal Time 0 0 27|GMT GMT Standard Time (GMT) : Dublin, Edinburgh, Lisbon, 0 60 London 26 Greenwich Standard Time (GMT) Monrovia, Reykjavik 0 0 28 W. Europe Standard Time (GMT+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, 60 60 Vienna 29 Central Europe Standard Time (GMT+01:00) Belgrade, Bratislava, Budapest, Ljubljana, 60 60 Prague 30 Romance Standard Time (GMT+01:00) Brussels, Copenhagen, Madrid, Paris 60 60 31 Central European Standard Time (GMT+01:00) Sarajevo, Skopje, Warsaw, Zagreb 60 60 32 W. Central Africa Standard Time (GMT+01:00) West Central Africa 60 0 88 Jordan Standard Time (GMT+02:00) Amman 120 60 33 GTB Standard Time (GMT+02:00) Athens, Bucharest, Istanbul 120 60 89 Middle East Standard Time (GMT+02:00) Beirut 120 60 35 Egypt Standard Time (GMT+02:00) Cairo 120 60 90 Syria Standard Time (GMT+02:00) Damascus 120 60 36 South Africa Standard Time (GMT+02:00) Harare, Pretoria 120 0 37 FLE Standard Time (GMT+02:00) Helsinki, kyiv, Riga, Sofia, Tallinn, Vilnius 120 60 38 Jerusalem Standard Time (GMT+02:00) Jerusalem 120 60 34 E. Europe Standard Time (GMT+02:00) Minsk 120 60 92 Namibia Standard Time (GMT+02:00) Windhoek 120 60 39 Arabic Standard Time (GMT+03:00) Baghdad 180 60 40 Arab Standard Time (GMT+03:00) Kuwait, Riyadh 180 0 41 Russian Standard Time (GMT+03:00) Moscow, St. Petersburg, Volgograd 180 60 42 E. Africa Standard Time (GMT+03:00) Nairobi 180 0 43 Iran Standard Time (GMT+03:30) Tehran 210 60 44 Arabian Standard Time (GMT+04:00) Abu Dhabi, Muscat 240 0 93 Azerbaijan Standard Time (GMT+04:00) Baku 240 60 45 Caucasus Standard Time (GMT+04:00) Caucasus Standard Time 240 0 94 Mauritius Standard Time (GMT+04:00) Port Louis 240 60 95 Georgian Standard Time (GMT+04:00) Tbilisi 240 0 96 Armenian Standard Time (GMT+04:00) Yerevan 240 60 46 Afghanistan Standard Time (GMT+04:30) Kabul 270 0 STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 60 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Code(s) Name Description UTC DST Offset Offset (Minutes) (Minutes)

47 Ekaterinburg Standard Time (GMT+05:00) Ekaterinburg 300 60 97 Pakistan Standard Time (GMT+05:00) Islamabad, Karachi 300 60 48 West Asia Standard Time (GMT+05:00) Tashkent 300 0 49 India Standard Time (GMT+05:30) Chennai, Kolkata, Mumbai, New Delhi 330 0 53 Standard Time (GMT+05:30) Sri Jayawardenepura 330 0 50 (GMT+05:45) Kathmandu 345 0 52 Central Asia Standard Time (GMT+06:00) Astana 360 0 98 (GMT+06:00) Dhaka 360 60 51 N. Central Asia Standard Time (GMT+06:00) Novosibirsk 360 60 54 (GMT+06:30) Yangon (Rangoon) 390 0 55 SE Asia Standard Time (GMT+07:00) Bangkok, Hanoi, Jakarta 420 0 56 North Asia Standard Time (GMT+07:00) Krasnoyarsk 420 60 57 China Standard Time (GMT+08:00) Beijing, Chongqing, Hong Kong, Urumqi 480 0 58 North Asia East Standard Time (GMT+08:00) Irkutsk 480 60 59 Malay Peninsula Standard Time (GMT+08:00) Kuala Lumpur, Singapore 480 0 60 W. Australia Standard Time (GMT+08:00) Perth 480 60 61 Taipei Standard Time (GMT+08:00) Taipei 480 0 100 Ulaanbaatar Standard Time (GMT+08:00) Ulaanbaatar 480 0 62 Tokyo Standard Time (GMT+09:00) Osaka, Sapporo, Tokyo 540 0 63 Korea Standard Time (GMT+09:00) Seoul 540 0 64 Yakutsk Standard Time (GMT+09:00) Yakutsk 540 60 65 Cen. Australia Standard Time (GMT+09:30) Adelaide 570 60 66 AUS Central Standard Time (GMT+09:30) Darwin 570 0 67 E. Australia Standard Time (GMT+10:00) Brisbane 600 0 68 AUS Eastern Standard Time (GMT+10:00) Canberra, Melbourne, Sydney 600 60 69 West Pacific Standard Time (GMT+10:00) Guam, Port Moresby 600 0 70 Tasmania Standard Time (GMT+10:00) Hobart 600 60 71 Vladivostok Standard Time (GMT+10:00) Vladivostok 600 60 72 Central Pacific Standard Time (GMT+11:00) Magadan, Solomon Is., New Caledonia 660 0 73 New Zealand Standard Time (GMT+12:00) Auckland, Wellington 720 60 101 UTC+12 (GMT+12:00) Coordinated Universal Time+12 720 0 74 Fiji Standard Time (GMT+12:00) Fiji 720 60 102 Kamchatka Standard Time (GMT+12:00) Petropavlovsk-Kamchatsky - Old 720 60 75 Tonga Standard Time (GMT+13:00) Nuku'alofa 780 0

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 61 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Appendix B – Country Codes (ISO 3166-1)

The below table lists the two digit and three-digit country codes that are acceptable by CSOD. Any country code not in the below list cannot be accepted.

COUNTRY NAME CODE CODE COUNTRY NAME CODE CODE Botswana BW BWA Afghanistan AF AFG Bouvet Island BV BVT Åland Islands AX ALA Brazil BR BRA Albania AL ALB British Indian Ocean Territory IO IOT Algeria DZ DZA Brunei Darussalam BN BRN American Samoa AS ASM Bulgaria BG BGR Andorra AD AND Burkina Faso BF BFA Angola AO AGO Burundi BI BDI Anguilla AI AIA Cambodia KH KHM Antarctica AQ ATA Cameroon CM CMR Antigua and Barbuda AG ATG Canada CA CAN Argentina AR ARG Cape Verde CV CPV Armenia AM ARM Cayman Islands KY CYM Aruba AW ABW Central African Republic CF CAF Australia AU AUS Chad TD TCD Austria AT AUT Chile CL CHL Azerbaijan AZ AZE China CN CHN Bahamas BS BHS Christmas Island CX CXR Bahrain BH BHR Cocos (Keeling) Islands CC CCK Bangladesh BD BGD Colombia CO COL Barbados BB BRB Comoros KM COM Belarus BY BLR Congo CG COG Belgium BE BEL Congo, the Democratic Belize BZ BLZ Republic of the CD COD Benin BJ BEN Cook Islands CK COK Bermuda BM BMU Costa Rica CR CRI Bhutan BT BTN Côte d'Ivoire CI CIV Bolivia, Plurinational State of BO BOL Croatia HR HRV Bonaire, Saint Eustatius Cuba CU CUB and Saba BQ BES Curacao CW CUW Bosnia and Herzegovina BA BIH STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 62 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

COUNTRY NAME CODE CODE COUNTRY NAME CODE CODE Cyprus CY CYP Guyana GY GUY Czech Republic CZ CZE Haiti HT HTI Denmark DK DNK Heard Island and McDonald Islands HM HMD Djibouti DJ DJI Holy See (Vatican City State) VA VAT Dominica DM DMA Honduras HN HND Dominican Republic DO DOM Hong Kong HK HKG Ecuador EC ECU Hungary HU HUN Egypt EG EGY Iceland IS ISL El Salvador SV SLV India IN IND Equatorial Guinea GQ GNQ Indonesia ID IDN Eritrea ER ERI Iran, Islamic Republic of IR IRN Estonia EE EST Iraq IQ IRQ Ethiopia ET ETH Ireland IE IRL Falkland Islands (Malvinas) FK FLK Isle of Man IM IMN Faroe Islands FO FRO Israel IL ISR Fiji FJ FJI Italy IT ITA Finland FI FIN Jamaica JM JAM France FR FRA Japan JP JPN French Guiana GF GUF Jersey JE JEY French Polynesia PF PYF Jordan JO JOR French Southern Territories TF ATF Kazakhstan KZ KAZ Gabon GA GAB Kenya KE KEN Gambia GM GMB Kiribati KI KIR Georgia GE GEO Korea, Democratic People's Germany DE DEU Republic of KP PRK Ghana GH GHA Korea, Republic of KR KOR Gibraltar GI GIB Kuwait KW KWT Greece GR GRC Kyrgyzstan KG KGZ Greenland GL GRL Lao People's Democratic Republic LA LAO Grenada GD GRD Latvia LV LVA Guadeloupe GP GLP Lebanon LB LBN Guam GU GUM Lesotho LS LSO Guatemala GT GTM Liberia LR LBR Guernsey GG GGY Libyan Arab Jamahiriya LY LBY Guinea GN GIN Liechtenstein LI LIE Guinea-Bissau GW GNB STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 63 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

COUNTRY NAME CODE CODE COUNTRY NAME CODE CODE Lithuania LT LTU Nigeria NG NGA Luxembourg LU LUX Niue NU NIU Macao MO MAC Norfolk Island NF NFK Macedonia, the former Northern Mariana Islands MP MNP Yugoslav Republic of MK MKD Norway NO NOR Madagascar MG MDG Oman OM OMN Malawi MW MWI Pakistan PK PAK Malaysia MY MYS Palau PW PLW Maldives MV MDV Palestinian Territory, Mali ML MLI Occupied PS PSE Malta MT MLT Panama PA PAN Marshall Islands MH MHL Papua New Guinea PG PNG Martinique MQ MTQ Paraguay PY PRY Mauritania MR MRT Peru PE PER Mauritius MU MUS Philippines PH PHL Mayotte YT MYT Pitcairn PN PCN Mexico MX MEX Poland PL POL Micronesia, Federated States Portugal PT PRT of FM FSM Puerto Rico PR PRI Moldova, Republic of MD MDA Qatar QA QAT Monaco MC MCO Réunion RE REU Mongolia MN MNG Romania RO ROU Montenegro ME MNE Russian Federation RU RUS Montserrat MS MSR Rwanda RW RWA Morocco MA MAR Saint Barthélemy BL BLM Mozambique MZ MOZ Saint Helena SH SHN Myanmar MM MMR Saint Kitts and Nevis KN KNA Namibia NA NAM Saint Lucia LC LCA Nauru NR NRU Saint Martin (French part) MF MAF Nepal NP NPL Saint Pierre and Miquelon PM SPM Netherlands NL NLD Saint Vincent and the Netherlands Antilles AN ANT Grenadines VC VCT New Caledonia NC NCL Samoa WS WSM New Zealand NZ NZL San Marino SM SMR Nicaragua NI NIC Sao Tome and Principe ST STP Niger NE NER Saudi Arabia SA SAU STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 64 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

COUNTRY NAME CODE CODE COUNTRY NAME CODE CODE Senegal SN SEN Tokelau TK TKL Serbia RS SRB Tonga TO TON Seychelles SC SYC Trinidad and Tobago TT TTO Sierra Leone SL SLE Tunisia TN TUN Singapore SG SGP Turkey TR TUR Sint Maarten (Dutch part) SX SXM Turkmenistan TM TKM Slovakia SK SVK Turks and Caicos Islands TC TCA Slovenia SI SVN Tuvalu TV TUV Solomon Islands SB SLB Uganda UG UGA Somalia SO SOM Ukraine UA UKR South Africa ZA ZAF United Arab Emirates AE ARE South Georgia and the South United Kingdom GB GBR Sandwich Islands GS SGS United States US USA Spain ES ESP United States Minor Outlying Sri Lanka LK LKA Islands UM UMI Sudan SD SDN Uruguay UY URY Suriname SR SUR Uzbekistan UZ UZB Svalbard and Jan Mayen SJ SJM Vanuatu VU VUT Swaziland SZ SWZ Venezuela, Bolivarian Republic of VE VEN Sweden SE SWE Viet Nam VN VNM Switzerland CH CHE Virgin Islands, British VG VGB Syrian Arab Republic SY SYR Virgin Islands, U.S. VI VIR Taiwan, Province of China TW TWN Wallis and Futuna WF WLF Tajikistan TJ TJK Western Sahara EH ESH Tanzania, United Republic of TZ TZA Yemen YE YEM Thailand TH THA Zambia ZM ZMB Timor-Leste TL TLS Zimbabwe ZW ZWE Togo TG TGO

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 65 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Appendix C – Errors

There are two types of errors, Hard Errors and Soft Errors.

HARD ERRORS (NO RECORDS WILL BE LOADED) Four issues will cause the feed to HARD ERROR for any single User/OU web service call. HARD ERROR = FEED FAILURE = no records will be loaded. Duplicate IDs  Please make sure for each file, all IDs are unique (this is required). Missing required fields  Missing IDs for OUs (primary key)  Missing IDs for Users (primary key) Lack of compliance to ANY specified data formats in this document  Date Formats MUST be yyyy-mm-dd  Maximum field lengths must be compliant  Date Range should be 1900-01-01 to 2080-01-01  Values for Enumerated fields are incorrect (i.e. Classification, Approvals, Status, etc.)

SOFT ERRORS (ONLY RECORDS WITH ERRORS ARE NOT LOADED) In the event of a soft error, the web service will continue to process. SOFT ERROR = at least one record within the web service call has an error that will not cause the entire web service call to fail. In other words, soft error records will not be loaded, but valid records will still be loaded.

 In the SetUsers web service call, the user’s OU ID does not match OU ID in the portal o Confirm OU IDs listed for the user exists for that particular OU as an OU ID in the portal. o Confirm if the OU SetOus web service call processed without errors.  In the SetUsers web service call, there are missing required OU IDs for users o Many OU Types are set as required, this means every user must have a value set for the OU. o Confirm required OUs are not blank for any user.  Missing required fields o Blank required fields o In the SetUsers web service call, confirm required User fields are not blank for any user.

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 66 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com

Appendix D – Language Codes

Language CODE

English - United States en-US English - United Kingdom en-GB French - Canada fr-CA German - Germany de-DE Russian - Russia ru-RU Japanese - Japan ja-JP Chinese - China zh-CN Chinese - Singapore zh-SG Chinese - Hong Kong SAR zh-HK Italian - Italy it-IT Polish - Poland pl-PL Portuguese - Brazil pt-BR French - France fr-FR Spanish - Mexico es-MX Spanish - Spain es-ES Portuguese - Portugal pt-PT Thai - Thailand th-TH Dutch - The Netherlands nl-NL Turkish - Turkey tr-TR Romanian - Romania ro-RO

STRICTLY CONFIDENTIAL / TECHNICAL SPECIFICATION 67 1601 Cloverfield Blvd., Suite #620 - Santa Monica, CA 90404 – USA Tel: (310) 752-0200 Fax: (310) 752-0199 Email: [email protected] Website: www.CornerstoneOnDemand.com