---
title: "UKG Pro Workforce Management - How do I Link my Account?"
slug: "ukg-pro-workforce-management-how-do-i-link-my-account"
tags: ["UKG Pro", "Workforce Management", "API User Setup"]
updated: 2026-05-26T14:12:09Z
published: 2026-05-26T14:12:09Z
canonical: "docs.thrivelearning.com/ukg-pro-workforce-management-how-do-i-link-my-account"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.thrivelearning.com/llms.txt
> Use this file to discover all available pages before exploring further.

# UKG Pro Workforce Management - How do I Link my Account?

To authenticate your UKG Pro Workforce Management account, you will need the following:

- Client ID - typically provided when your tenant is provisioned
- Client Secret - typically provided when your tenant is provisioned
- Username
- Password

To configure your account properly, you'll need to:

1. Create an API User
2. Ensure a function access profile is assigned to that user with the appropriate permissions.

See instructions below on how to accomplish this.

If you don’t have access to your Client ID or Client Secret, please contact UKG Global Support for assistance.

## Prerequisites

Please ensure you fulfil all the requirements to set up the integration:

- You are an Administrator in your company's UKG Pro instance, or someone has shared their access with you.

# Creating an API User:

1. Identify an existing admin user who has access to all employees, locations, etc. (It’s easiest to start with an account that has the permissions needed to run APIs.)
2. Go to **menu** > **Maintenance** > **People Information**
3. Duplicate the user account by selecting the person and going to **Person** > **Duplicate**.
4. In the new profile:

- Select **Edit Licenses** and confirm at least a Manager license is selected. Other licenses may be needed depending on the required access.
- Under the **Information** section:
  - Set the last name to **APIUser**.
  - Set the ID to **APIUser** (or another unused user ID).
  - Assign a new username (e.g., **APIUser**).
  - Set the **Username** to **APIUser**.
  - Set the **Authentication Type** to **Basic**.
  - Assign and confirm a password.
  - Check the box next to **API Only User**. This ensures the password does not expire. Once checked, the user cannot log in via browser or mobile app.

1. Under the **Access Profiles** section:

- These settings should be duplicated from the original user.
- Typically, the **Function Access Profile** and **Display Profile** should be set to **Super Access**, though more restrictive access can be configured if needed.
- The remaining fields are usually not required for an API user.

## Creating a Function Access Profile (if needed)

*This step is only necessary if you don't copy the function access profile from the step above.*

1. Log into WFM with an administrative account that has access to Setup
2. Navigate to **Administration** > **Application Setup**

![image.png](https://assets.usepylon.com/f49877ed-d3d7-46e1-834d-1ddef64edf14%2F1769574574945-image.png?Expires=253370764800&Signature=MaYFLVhNmXTtEVYzY2ZjryD5MySv8VZQNrLbbs7tJ4zmymBSOyFHXU8dLbla1i-JxP4wiM7eaj1RVCtMMZC-jhYEYL4oIDiPH-LKIKiXbJGcKyn1-06jrPZeX27ON9oLa1j~1SSejJW-JXT7LTCSRWM0DAgO50DOOKjei4qGafOa~WI7T10b5n4qm4MUB3GJIU9qgA2RQ3LrYnqFaAsmZwONXGknOZ4ltFe1VI01gVgS4NdMkxWKQ4Z4Q91RG~FOxg7J8cfPvfd7a~Ei1LlMSutRoYaNfZPDvavw8gb3ECAhrOqZsM9-YXwUTOpPV-5mETYDouZ0UjhLjBg~b5DvNA__&Key-Pair-Id=K3NV4LZ47N8M46)

1. Expand **Access Profiles** and click on **Function Access Profiles**

![image.png](https://assets.usepylon.com/f49877ed-d3d7-46e1-834d-1ddef64edf14%2F1769574646010-image.png?Expires=253370764800&Signature=QZIJUEYxeYw7yebTmO~56Kh1VA29EISmQ6iuiHXWq9wNNH1eV5gBElD9VmXQlcXYGDNFrsdj70vs8H~X9rRc7DGAI-3d65SQ-KCe4yeiMUjAWJ66-1i6Zuy2kC5qwuzB3Dbkm7pKlqXRPlZkfBK-IjyoJgm2sGe6Q2Xlk3yHISD8qeJdlpr~VP1uKYPBU1ROiOPMY9WdsGqak56qETdblLG0rAgCLDjoCRf6UOp6UBwGdbVC5ywEx9O0Z0VvxYlWoLtVl5HPlc7~zvfIBKxDO5SLSIFPYB-QFJGiHgjQmy1CNau76NZd1VuknNxf10Uyw4NoUxmQg4LbPWnVNkg0Mw__&Key-Pair-Id=K3NV4LZ47N8M46)

1. Click **New**

![image.png](https://assets.usepylon.com/f49877ed-d3d7-46e1-834d-1ddef64edf14%2F1769574673305-image.png?Expires=253370764800&Signature=dzWwH1ntTvAkdVzFa--sh~~Zb3JsVUONz55KOjS63hTee8EaPSJl3AON2PYxIy8tB4w8fmnF~DDIcQ-cWiZyY4BSV4l4NTZxmIHEshfphdKy7aLqlv5Wm1dxVmTXSX9AM0u6SvTOaDZSUpY81rfaklxHtebaxC6zrfxOqxUygZdKWJC8JMwav0QOdN53~JfNjwJHqb6n-7fz74CAXxj4hYPLG98UsTSO-e9FB8tNlTtPXavTRri4wLiMicfUhyoT5ZlCoQ75Xy50JegejOLB1ndaf2VR6OfIf~o831dUBxNkfneeSjBZF4CGRohOPxX4mVcQ1HZKcKkfEPeQ9mFBOQ__&Key-Pair-Id=K3NV4LZ47N8M46)

1. Populate details in the **New Function Access Profile** screen:
  1. The **Name** can be anything, though it's best to pick a name you'll remember, like the name of the application you're connecting to
  2. Set the function access profile to **Super Admin** access. All control points are disallowed by default.

![image.png](https://assets.usepylon.com/f49877ed-d3d7-46e1-834d-1ddef64edf14%2F1769574693080-image.png?Expires=253370764800&Signature=Pw7rmW6fdygievOpcPQWhI5xQGmlcl5r4Lh4zqGO5wc~6TVgdetAEaNJhY~3jMFYIo7qF2ajbNLUXj0w9DA1aq4R1XePHMygFou2djsL8tccO3a~AtIevYYGNz07JF5ehsQ1CqGIQQvYSc85kpENAfdlo2ztfuSAYS~lSvCEEcHDUdyWKypHeoMo9pCuHj3~5iO~ORHmjBvXHJ60SdF7jKWozm9lmRKsr~pgTWK2CCQ00RD~~cTfICWHzWWcb7RFr629EqjILe~cNVQITSZKPRlYEh3Ec5IgGPzPsvygvQqLrdKEuCs0JnQsifdZTGDwFBoa56d8Clf1QP1j0~B4rA__&Key-Pair-Id=K3NV4LZ47N8M46)

1. Click **Save & Return**.

1. When you define your account / user in people setup, assign this function access profile.

## Linking Instructions

### Step 1: Enter your Username and Password

![image.png](https://assets.usepylon.com/f49877ed-d3d7-46e1-834d-1ddef64edf14%2F1769574756721-image.png?Expires=253370764800&Signature=AyNrOIHvQwaBYll5fs6M54vzVcu4ruJ0SmNMjuK9szpC3VKk4Sw69fMF-7LVNTWvhjdxv~1RHBaibUMqwxNJZXAZ0VVe2k5I~B65B-qMCKa42gxZ7C487EtUKO7M4SmNz159zniX3ny2ADqPAP1paYlTJ~rqKmFpjU0Os1xpllsFGAXvWSZJzAWGLa0VmEH1YOjiMxW~VE~8D0lq9mpXCXFT4FzLhm3U7gth42rqSrgx9GZ4qPLqmPy8y7wC2iLHDWfYAF8HETbpVQmpa0cYoqGVdzWSfQgPg0b0tEAzwRify-KhcgIqznJwCE~C4FznXMNysnVE375iqahVdUKWlQ__&Key-Pair-Id=K3NV4LZ47N8M46)

### Step 2: Enter your Client ID and Client Secret

![image.png](https://assets.usepylon.com/f49877ed-d3d7-46e1-834d-1ddef64edf14%2F1769574771709-image.png?Expires=253370764800&Signature=rrs7ruo1nxbhwq-UuJDv2XiWIMo54LjAA3OD6~t8OO972qI3NpNCrl17J6sTOZh9zweqWhw1J~qEfxeIhpz5LlVrJ8pSLHpRUbw7Xu6c7AQoecu6vI02RgVVOlG6xAHukvK-wwxqyNhwDrteMHXHYNtQ29zqiV1vmr~e8e~dpZOqCC-jP88fz893~bFa1pce1Wxd-BhwCY3MDEMxl~kz1JOMsQ-TZoz3XaLJUMDXbe7OxQxLWBWMTEGeLySqDYqoni2iDzz0EV0sU-80kEcb3akF-A9xqMPGg1uLya6ReJl~OvsS7W2LMhe1zpJAWehkTciikOy9hgrcMQdT~lS-nA__&Key-Pair-Id=K3NV4LZ47N8M46)

### Step 3: Enter your subdomain

![image.png](https://assets.usepylon.com/f49877ed-d3d7-46e1-834d-1ddef64edf14%2F1769574785119-image.png?Expires=253370764800&Signature=T0Ep890pgk1wmtLFGO72dXmXf5bLiXFpfbMNk1yH~aHJslqPPRhOVYokoJpLO7FgJExdT-47DAv-9AdzeFG2eufsaJbaiV3WKeEiFeDpRFLIBqHrxZmCZQP7wDOqnW2YcZijKbZXLaifI1piPIwlejQ4LtIhyqMX-lu3~-34V-zr9i9CQn6qeopyEzcEi700dC117BWuOVGIknY6NRNQ70yVKsWsv2AcjLFVGct20nXhn6kgapTnBQ3BnO9bxB-iQ1MlOLFc28OchWtxsWxtNUUlxvtblMurLCg2zQflFReWEYoJ6G59igVlTpT3hiVeDgki53C1E8-FhrwSGqAoVQ__&Key-Pair-Id=K3NV4LZ47N8M46)

You may need to remove “-sso” from the URL if it’s present. For example, if your URL is `merge-sso.prd.mykronos.com`, enter `merge.prd` instead.

API (Application Programming Interface) is a set of protocols and tools that allow different software applications to communicate with each other. APIs enable the integration of third-party services, data exchange, and interaction between systems, allowing for enhanced functionality and streamlined workflows.