I’ve got the same requirement in our teacher app - wondering if you figured yours out since your post @JustinC.
When a teacher signs up in our app for a trial, we schedule an API workflow to run 23 days later that lets them know their trial ends in 7 days. We also at this time schedule a workflow to end their trial (make changes to: account = inactive) 30 days after sign up. However, the teacher may in the course of their trial pay us, and then their account goes to Active. But we don’t want to send them that email and then make them inactive on their expiration date!
I think we got it with the below, by saying "only run this workflow when account status = “trial.” Curious to hear if the forum folk agree.
My understanding is that you probably don’t want to check “endpoint can be run without authentication” because that means it’s not going to look authenticate all the parameters before it runs.