> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# UKG (Kronos)

> Connect ThreatAware to UKG to monitor workforce management and access control compliance

## Overview

The UKG (Kronos) integration enables ThreatAware to collect read-only data from your UKG workforce management system, providing visibility into user access and helping validate your identity and access management controls.

<Info>
  **Connection Method**: API
  **Setup Time**: 15 minutes
  **Access Required**: UKG Administrator account
</Info>

## Data collected

The UKG integration provides:

* User access and permissions
* Workforce management data
* Access control compliance metrics
* User activity audit trail

## Use cases

<CardGroup cols={2}>
  <Card title="Access Management Tracking" icon="users">
    Monitor user access levels and permissions across your workforce management system
  </Card>

  <Card title="Compliance Validation" icon="clipboard-check">
    Verify access control policies are properly configured in UKG
  </Card>

  <Card title="Identity Monitoring" icon="eye">
    Track user provisioning and deprovisioning across your environment
  </Card>

  <Card title="Audit Support" icon="file-contract">
    Generate reports showing access control coverage and compliance metrics
  </Card>
</CardGroup>

## Setup instructions

<Steps>
  <Step title="Log in to UKG Admin Console">
    Access the [UKG Admin Console](https://your-ukg-url.com) using an administrator account.
  </Step>

  <Step title="Create API Client">
    In the UKG console, navigate to **System Configuration** > **API Access Management**.

    * Click **Create API Client** and configure a new client for ThreatAware integration
    * Assign the necessary permissions, typically **Read-only** for monitoring purposes, unless ThreatAware requires broader access
    * Copy the **Client ID** and **Client Secret** once created
  </Step>

  <Step title="Configure in ThreatAware">
    Complete the integration setup in ThreatAware:

    * Open ThreatAware and navigate to **Settings** > **Integrations**
    * Search for and select **UKG (Kronos)**
    * Enter the required credentials:
      * **Client ID**: The ID generated for the API client in UKG
      * **Client Secret**: The secret associated with the Client ID
      * **UKG URL**: Your UKG instance URL
    * Click **Connect** to establish the integration
  </Step>

  <Step title="Verify Connection">
    After connecting, ThreatAware will begin polling data from UKG within 1 hour.

    * Check that the **Integration Status** shows as **Active**
    * Verify data is appearing in ThreatAware by viewing access management details
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="Client ID" icon="key">
    **Field Name**: UKG Client ID
    **Type**: String
    **Description**: ID generated for the API client in UKG

    This identifies your ThreatAware application to the UKG system.
  </Accordion>

  <Accordion title="Client Secret" icon="lock">
    **Field Name**: UKG Client Secret
    **Type**: Password (encrypted)
    **Description**: Secret associated with the Client ID

    <Tip>
      Store this credential securely in your organisation's password manager for future reference.
    </Tip>
  </Accordion>

  <Accordion title="UKG URL" icon="server">
    **Field Name**: UKG URL
    **Type**: String
    **Description**: The URL of your UKG (Kronos) instance

    **Format**: `https://your-ukg-url.com`
    **Example**: `https://ukg.acme.com` or `https://kronos.company.net`
  </Accordion>
</AccordionGroup>

## Verification and testing

After setup, verify the integration is working correctly:

1. **Check Integration Status**
   * Navigate to **Settings** > **Integrations** in ThreatAware
   * Confirm the UKG (Kronos) integration shows **Active** status
   * Check the last sync timestamp

2. **Verify Data Collection**
   * Wait 60 minutes for the initial data poll
   * Check that user and access data is appearing in ThreatAware
   * View access management details in the platform

3. **Test Queries**
   * Create a test query to filter users or access data
   * Verify the data matches your expectations

## Troubleshooting

<AccordionGroup>
  <Accordion title="Invalid Credentials Error" icon="triangle-exclamation">
    **Symptoms**: Integration status shows authentication failure

    **Solutions**:

    * Verify the **Client ID** and **Client Secret** are accurate
    * Ensure API access is enabled for the client in UKG
    * Check that the client credentials have not expired
    * Confirm the credentials were entered without extra spaces
  </Accordion>

  <Accordion title="Permission Issues" icon="ban">
    **Symptoms**: Integration connects but no data appears

    **Solutions**:

    * Verify the API client has the correct permissions configured for ThreatAware access in UKG
    * Review the [UKG API Documentation](https://community.ukg.com/) for required permissions
    * Check if there are organisational units the client cannot access
    * Ensure the client has permissions across all required scopes
  </Accordion>

  <Accordion title="Connection Timeout" icon="clock">
    **Symptoms**: Integration fails to connect or times out

    **Solutions**:

    * Verify the UKG URL is correct and accessible from ThreatAware
    * Check firewall rules allow outbound HTTPS (443) to your UKG instance
    * Confirm your UKG system is accessible via the internet (or review network requirements)
    * Test the URL in a browser to ensure it's reachable
  </Accordion>

  <Accordion title="No Data After 1 Hour" icon="database">
    **Symptoms**: Integration shows active but no user or access data appears

    **Solutions**:

    * Verify there is user data in UKG to collect
    * Check the API client's scope and access permissions
    * Review ThreatAware integration logs (contact support if needed)
    * Confirm your UKG instance contains the data you expect to see
  </Accordion>
</AccordionGroup>

## Additional resources

<CardGroup cols={2}>
  <Card title="UKG API Documentation" icon="book" href="https://community.ukg.com/">
    Official UKG API documentation for detailed permissions and configuration
  </Card>

  <Card title="ThreatAware Support" icon="life-ring" href="mailto:help@threataware.com">
    Contact ThreatAware support for integration assistance
  </Card>
</CardGroup>

## Best practices

<Tip>
  **Credential Management**

  * Create a dedicated API client specifically for ThreatAware
  * Document credentials in your organisation's password manager
  * Rotate credentials annually or per your security policy
  * Monitor for authentication failures in ThreatAware regularly
</Tip>

<Tip>
  **Security Considerations**

  * Only grant read-only permissions (never write access)
  * Limit API client scope to only necessary systems
  * Review audit logs in UKG periodically to monitor API usage
  * Follow your organisation's least privilege principles
</Tip>