--- title: "Connect Clarity Security to UKG" slug: "ukg" description: "Learn how to connect Clarity Security to UKG to automate your identity life cycle management and user access reviews." tags: ["Application Marketplace", "Application Connectors", "how-to"] updated: 2025-05-19T14:10:06Z published: 2025-05-19T14:10:06Z canonical: "help.claritysecurity.com/ukg" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # UKG This guide will teach you how to set up the connector between [UKG](https://www.ukg.com) (Formerly Ultipro) and [Clarity Security](https://claritysecurity.io). **Estimated time to complete:** 20-30 minutes If you run into any problems, please contact your support team or [support@claritysecurity.io](mailto:support@claritysecurity.io). ## How to Setup the Connector ### Step 1: Log in to your UKG Pro portal. [https://signin.ultipro.com/ui/#/](https://signin.ultipro.com/ui/#/) ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28232%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 2: Navigate to the System Configuration > Security > Service Account Administration then click Add ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28235%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 3: Provide the Service Account a username, email, and check "Generate New Password". ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28238%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 4: Scroll down to grant the Service Account permissions to: | Permission | Required/Optional | Details | | --- | --- | --- | | **View - Personnel Integration** | Required | Required to pull in User Data. | | **View - Company Configuration Integration** | Optional | Translating Org Unit Codes to Org Unit Descriptions (we only check this endpoint every 24 hours). | ### Step 5: After saving the Service Account configuration, you will be redirected to the main Service Account Administration page. Copy the Customer API Key into Clarity. ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28239%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 6: Navigate to Web Services along the top menu, and copy the subdomain or hostname listed next to the Login Service Endpoint. What is my subdomain or hostname? If the URL next to Login Service Endpoint is http://service1.ultipro.com/services/LoginService. The **subdomain** is “**service1”** (no quotes) for **Step 9**. If the URL next to Login Service Endpoint looks like https://uswest1-gateway.ukg.net/services/LoginService, then the **hostname** in **Step 9** will be “**uswest1-gateway.ukg”** (no quotes). ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28240%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 7: Log into your Clarity Security Portal ### Step 8: Click On Applications. Select Marketplace. Then search for UKG and click connect. ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28241%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 9: Configure the connection. Copy the following fields from UKG into the matching field in Clarity. - **Service Account Username**: From step 3 into **Username** - **Service Account Password**: From step 3 into **Password** - **password:** Service Account Password from Step 3 - **api_key:** Customer API Key from **Step 5** - **subdomain**: Login Service Endpoint Subdomain from **Step 6.** Leave blank if in Step 6 you ended up with a hostname. - **hostname**: full hostname (not full URL) from **Step 6**. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image(545).png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28242%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 10: Configure the additional Application Settings. Complete the App Settings form. Details for each field can be found at the following article: [Common App Configuration Steps](https://help.claritysecurity.com/docs/common-app-configuration-steps) ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%2813%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 11: User Settings Complete the User Settings form, check the table at the top to see if any features are unsupported. Details for each field can be found at the following article: [Common App Configuration Steps](https://help.claritysecurity.com/docs/common-app-configuration-steps) ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%2814%29.png?sv=2026-02-06&spr=https&st=2026-10-31T12%3A13%3A10Z&se=2026-10-31T13%3A13%3A10Z&sr=c&sp=r&sig=VpecgS7DZbx7pS9T%2BXxrD9TM5Rb5%2FC6SbvydGTQw7vA%3D) ### Step 12: Validate Your Selections and Save Save Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing). This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes. ## Need help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. A Service User is a user, or service account, discovered by Clarity in a downstream application. An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies. Service User Entitlements are the pairings of users and active entitlement access in downstream applications. An attribute is a piece of information used to describe a service user, entitlement, or identity. Common examples include First Name, Last Name, Job Title, Department, etc.