Skip to main content

Overview

To authenticate with UKG Pro (Workforce Management) using the Client Credentials flow, you will need:
  1. Client ID — The Client ID configured for the client credentials authentication flow in UKG Pro Workforce Management.
  2. Client Secret — The Client Secret associated with that Client ID.
  3. Organization — The organization ID specific to your tenant.
  4. Tenant URL — The base URL for your UKG WFM API instance (e.g. wfm.us1.ukg.com).
This guide walks you through obtaining each of these values.

Prerequisites

  • A UKG Pro Workforce Management tenant configured for UKG Authentication. Only tenants configured for UKG Authentication expose the Client Management page — if your tenant uses a different authentication type, this page is not available.

Instructions

Step 1: Finding your Client ID and Client Secret

  1. In UKG Pro Workforce Management, go to Administration → Application Setup → Common Setup → Client Management.
  2. Create (or select) a client and set its application flow to Client Credentials.
  3. Copy the Client ID and Client Secret.
The Client Secret cannot be recovered once you leave this page. Copy it and store it securely before continuing.
Client credentials are tenant-specific — a client created on a non-production tenant can’t get a token for your production tenant. Create separate credentials per environment. Use the Client Credentials flow for system-to-system integrations that don’t need to act as a specific WFM user, such as scheduled data syncs. If you need to perform actions on behalf of a specific employee or manager, use the ROPC flow instead.

Step 2: Finding your Organization ID

UKG associates each Client Credentials client with an organization ID specific to your tenant. This isn’t shown on the Client Management page in the same way as the Client ID — if it wasn’t provided when your client was set up, ask your UKG representative to confirm the value for your tenant.

Step 3: Finding your Tenant URL

When your tenant is provisioned, a password-protected Excel worksheet is attached to your company’s Salesforce account. This worksheet contains your Tenant URL.

Step 4: Enter credentials in the Connect UI

Once you have your Client ID, Client Secret, Organization, and Tenant URL:
  1. Open the form where you need to authenticate with UKG Pro (Workforce Management).
  2. Enter your Client ID and Client Secret.
  3. Enter your Organization ID.
  4. Enter your Tenant URL.
  5. Submit the form, and you should be successfully authenticated.
You are now connected to UKG Pro (Workforce Management) via the Client Credentials flow.