---
sourceDocument: Brazil Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/integrate-applications

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Configure a connection

# Configure a connection for the UKG spoke {#ariaid-title1}

Release version: Brazil  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Add and configure a connection using the UKG spoke connection template in Flow Designer to authenticate ServiceNow requests to your UKG instance.

## Before you begin

Request an Integration Hub subscription.

Activate the UKG Spoke.

Role required: admin  
Note:  
If you're updating from a previous version (before version 3.3.0) of the spoke, first you must remove the current connection record, credentials record, and Kronos user credentials. Then, you can set up the connection.  
UKG has updated its authentication mechanism from legacy Auth to AuthN. If you're setting up the spoke for the first time, use AuthN to configure the spoke. If you have previously configured the spoke using the legacy Auth, you can continue using your existing configuration or migrate to AuthN.  
Note:  
Verify that the application registry, connections, and credentials are within the application scope.

## Procedure

1. Navigate to AllProcess AutomationFlow Designer.
2. Select the Connections tab.
3. Locate the UKG connection alias and select View Details.  
   Note:  
   Don't select Add Connection.
4. Select Edit.  
   If you're configuring the spoke for the first time, select Configure.
5. On the form, fill in the fields.  
   {#configure-connection-ukg-spoke__table_olv_1my_bcc__entry__2}

   | Field | Description |
   |-|-|
   | Connection Name | Name to uniquely identify the connection record. For example, enter Kronos Conn. |
   | Connection URL | URL of the Kronos instance. |
   | Realm | Realm of the Kronos instance. |
   | Username | Username to log in to the user's account in Kronos. |
   | Password | Password of the Kronos user account. |
   | OAuth Entity Name | Unique name to identify the OAuth entity profile of the UKG spoke. For example, select <kbd class="ph userinput">UKG OAuth entity</kbd> . |
   | OAuth Client ID | Client ID created during the application configuration in Kronos. |
   | OAuth Client Secret | Client Secret created during the application configuration in Kronos. |
   | Token URL | OAuth server token endpoint. For example, <kbd class="ph userinput">https://&lt;Kronos-Instance&gt;.com/api/authentication/access_token</kbd>. Note: If you're using the AuthN mechanism,enter <kbd class="ph userinput"> https://welcome-eval.ukg.net/oauth/token</kbd>. |
   [ ]

   {#configure-connection-ukg-spoke__table_olv_1my_bcc}
6. Select Configure and Get OAuth Token.  
   A modal page displays to enter your Kronos credentials.
7. Enter your Kronos username and password and select Get OAuth Token.
8. If you're using the legacy Auth mechanism, you must provide user credentials.  
   For more information, see [Provide Kronos user credentials](https://www.servicenow.com/docs/9BVdjI5exVHUmZiKurEoCQ "Create a record to provide details and credentials of the required Kronos user. The Kronos spoke uses these user credentials to perform actions in Kronos.").
9. If you're using the legacy Auth mechanism, you must set the refresh token lifespan.
   1. Navigate to AllSystem OAuthApplication Registry.
   2. Open the record for the Kronos spoke.
   3. On the form, navigate to the Refresh Token Lifespan field.
   4. Enter <kbd class="ph userinput">28800</kbd>.
   {#configure-connection-ukg-spoke__substeps_fzq_2dl_mjc}

## Result

Once your OAuth token has been successfully fetched, you can begin using your UKG spoke connection.

*[\>]: and then