Configure a connection for the UKG spoke

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Add and configure a connection using the UKG spoke connection template in Flow Designer to authenticate ServiceNow requests to your UKG instance.

    Before you begin

    Request an Integration Hub subscription.

    Activate the UKG Spoke.

    Role required: admin

    Note:
    If you're updating from a previous version (before version 3.3.0) of the spoke, first you must remove the current connection record, credentials record, and Kronos user credentials. Then, you can set up the connection.
    UKG has updated its authentication mechanism from legacy Auth to AuthN. If you're setting up the spoke for the first time, use AuthN to configure the spoke. If you have previously configured the spoke using the legacy Auth, you can continue using your existing configuration or migrate to AuthN.
    Note:
    Verify that the application registry, connections, and credentials are within the application scope.

    Procedure

    1. Navigate to All > Process Automation > Flow Designer.
    2. Select the Connections tab.
    3. Locate the UKG connection alias and select View Details.
      Note:
      Don't select Add Connection.
      Connection template for UKG spoke.
    4. Select Edit.
      If you're configuring the spoke for the first time, select Configure.Configure a connection for the UKG spoke
    5. On the form, fill in the fields.
      Field Description
      Connection Name Name to uniquely identify the connection record.

      For example, enter Kronos Conn.
      Connection URL URL of the Kronos instance.
      Realm Realm of the Kronos instance.
      Username Username to log in to the user's account in Kronos.
      Password Password of the Kronos user account.
      OAuth Entity Name Unique name to identify the OAuth entity profile of the UKG spoke.

      For example, select UKG OAuth entity

      .
      OAuth Client ID Client ID created during the application configuration in Kronos.
      OAuth Client Secret Client Secret created during the application configuration in Kronos.
      Token URL OAuth server token endpoint. For example, https://<Kronos-Instance>.com/api/authentication/access_token.
      Note:
      If you're using the AuthN mechanism,enter https://welcome-eval.ukg.net/oauth/token.
    6. Select Configure and Get OAuth Token.
      A modal page displays to enter your Kronos credentials.
    7. Enter your Kronos username and password and select Get OAuth Token.
    8. If you're using the legacy Auth mechanism, you must provide user credentials.
      For more information, see Provide Kronos user credentials.
    9. If you're using the legacy Auth mechanism, you must set the refresh token lifespan.
      1. Navigate to All > System OAuth > Application Registry.
      2. Open the record for the Kronos spoke.
      3. On the form, navigate to the Refresh Token Lifespan field.
      4. Enter 28800.

    Result

    Once your OAuth token has been successfully fetched, you can begin using your UKG spoke connection.