UKG Spoke › Integration Hub spokes › Build integrations › Integration Hub › Workflow Data Fabric

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configure a connection for the UKG spoke

Add and configure a connection using the UKG spoke connection template in Flow Designer to authenticate ServiceNow requests to your UKG instance.

Before you begin

Request an Integration Hub subscription.

Activate the UKG Spoke.

Role required: admin

Note: If you're updating from a previous version (before version 3.3.0) of the spoke, first you must remove the current connection record, credentials record, and Kronos user credentials. Then, you can set up the connection.

UKG has updated its authentication mechanism from legacy Auth to AuthN. If you're setting up the spoke for the first time, use AuthN to configure the spoke. If you have previously configured the spoke using the legacy Auth, you can continue using your existing configuration or migrate to AuthN.

Note: Verify that the application registry, connections, and credentials are within the application scope.

Procedure

Navigate to All > Process Automation > Flow Designer.
Select the Connections tab.
Locate the UKG connection alias and select View Details.

Note: Don't select Add Connection.

Image omitted: ukg-spoke-conn-template.png
Connection template for UKG spoke.

Select Edit.

If you're configuring the spoke for the first time, select Configure.

Image omitted: ukg-spoke-config-conn.png
Configure a connection for the UKG spoke

On the form, fill in the fields.

Field	Description
Connection Name	Name to uniquely identify the connection record. For example, enter Kronos Conn.
Connection URL	URL of the Kronos instance.
Realm	Realm of the Kronos instance.
Username	Username to log in to the user's account in Kronos.
Password	Password of the Kronos user account.
OAuth Entity Name	Unique name to identify the OAuth entity profile of the UKG spoke. For example, select `UKG OAuth entity` .
OAuth Client ID	Client ID created during the application configuration in Kronos.
OAuth Client Secret	Client Secret created during the application configuration in Kronos.
Token URL	OAuth server token endpoint. For example, `https://<Kronos-Instance>.com/api/authentication/access_token`.Note: If you're using the AuthN mechanism,enter `https://welcome-eval.ukg.net/oauth/token`.

Select Configure and Get OAuth Token.

A modal page displays to enter your Kronos credentials.
Enter your Kronos username and password and select Get OAuth Token.
If you're using the legacy Auth mechanism, you must provide user credentials.

For more information, see Provide Kronos user credentials.
If you're using the legacy Auth mechanism, you must set the refresh token lifespan.
1. Navigate to All > System OAuth > Application Registry.
2. Open the record for the Kronos spoke.
3. On the form, navigate to the Refresh Token Lifespan field.
4. Enter 28800.

Result

Once your OAuth token has been successfully fetched, you can begin using your UKG spoke connection.