Skip to main content

​
Overview

The UKG (Kronos) integration enables ThreatAware to collect read-only data from your UKG workforce management system, providing visibility into user access and helping validate your identity and access management controls.
Connection Method: API Setup Time: 15 minutes Access Required: UKG Administrator account

​
Data collected

The UKG integration provides:
  • User access and permissions
  • Workforce management data
  • Access control compliance metrics
  • User activity audit trail

​
Use cases

Access Management Tracking

Monitor user access levels and permissions across your workforce management system

Compliance Validation

Verify access control policies are properly configured in UKG

Identity Monitoring

Track user provisioning and deprovisioning across your environment

Audit Support

Generate reports showing access control coverage and compliance metrics

​
Setup instructions

1

Log in to UKG Admin Console

Access the UKG Admin Console using an administrator account.
2

Create API Client

In the UKG console, navigate to System Configuration > API Access Management.
  • Click Create API Client and configure a new client for ThreatAware integration
  • Assign the necessary permissions, typically Read-only for monitoring purposes, unless ThreatAware requires broader access
  • Copy the Client ID and Client Secret once created
3

Configure in ThreatAware

Complete the integration setup in ThreatAware:
  • Open ThreatAware and navigate to Settings > Integrations
  • Search for and select UKG (Kronos)
  • Enter the required credentials:
    • Client ID: The ID generated for the API client in UKG
    • Client Secret: The secret associated with the Client ID
    • UKG URL: Your UKG instance URL
  • Click Connect to establish the integration
4

Verify Connection

After connecting, ThreatAware will begin polling data from UKG within 1 hour.
  • Check that the Integration Status shows as Active
  • Verify data is appearing in ThreatAware by viewing access management details

​
Required credentials

Field Name: UKG Client ID Type: String Description: ID generated for the API client in UKGThis identifies your ThreatAware application to the UKG system.
Field Name: UKG Client Secret Type: Password (encrypted) Description: Secret associated with the Client ID
Store this credential securely in your organisation’s password manager for future reference.
Field Name: UKG URL Type: String Description: The URL of your UKG (Kronos) instanceFormat: https://your-ukg-url.com Example: https://ukg.acme.com or https://kronos.company.net

​
Verification and testing

After setup, verify the integration is working correctly:
  1. Check Integration Status
    • Navigate to Settings > Integrations in ThreatAware
    • Confirm the UKG (Kronos) integration shows Active status
    • Check the last sync timestamp
  2. Verify Data Collection
    • Wait 60 minutes for the initial data poll
    • Check that user and access data is appearing in ThreatAware
    • View access management details in the platform
  3. Test Queries
    • Create a test query to filter users or access data
    • Verify the data matches your expectations

​
Troubleshooting

Symptoms: Integration status shows authentication failureSolutions:
  • Verify the Client ID and Client Secret are accurate
  • Ensure API access is enabled for the client in UKG
  • Check that the client credentials have not expired
  • Confirm the credentials were entered without extra spaces
Symptoms: Integration connects but no data appearsSolutions:
  • Verify the API client has the correct permissions configured for ThreatAware access in UKG
  • Review the UKG API Documentation for required permissions
  • Check if there are organisational units the client cannot access
  • Ensure the client has permissions across all required scopes
Symptoms: Integration fails to connect or times outSolutions:
  • Verify the UKG URL is correct and accessible from ThreatAware
  • Check firewall rules allow outbound HTTPS (443) to your UKG instance
  • Confirm your UKG system is accessible via the internet (or review network requirements)
  • Test the URL in a browser to ensure it’s reachable
Symptoms: Integration shows active but no user or access data appearsSolutions:
  • Verify there is user data in UKG to collect
  • Check the API client’s scope and access permissions
  • Review ThreatAware integration logs (contact support if needed)
  • Confirm your UKG instance contains the data you expect to see

​
Additional resources

UKG API Documentation

Official UKG API documentation for detailed permissions and configuration

ThreatAware Support

Contact ThreatAware support for integration assistance

​
Best practices

Credential Management
  • Create a dedicated API client specifically for ThreatAware
  • Document credentials in your organisation’s password manager
  • Rotate credentials annually or per your security policy
  • Monitor for authentication failures in ThreatAware regularly
Security Considerations
  • Only grant read-only permissions (never write access)
  • Limit API client scope to only necessary systems
  • Review audit logs in UKG periodically to monitor API usage
  • Follow your organisation’s least privilege principles