We are excited to announce that your instance of UKG Pro is moving to Adaptive MFA to provide stronger security while reducing login friction. All customers must complete the required authentication upgrade by June 1, 2026.
Overview: What’s Changing
PlanSource is partnering with UKG Pro to upgrade the authentication experience to a unified authentication platform with Adaptive Multi‑Factor Authentication (MFA). This upgrade enhances security while improving the day‑to‑day login experience for employees and administrators.
Adaptive MFA intelligently applies additional verification only when login activity appears unusual or higher risk, allowing trusted, routine access to remain fast and seamless.
This upgrade applies to all UKG Pro and UKG Pro Workforce Management customers, regardless of whether you use Single Sign‑On (SSO) or direct login.
Why This Is Happening
This is a mandatory UKG platform upgrade and the foundation for future enhancements across the UKG Pro suite. It delivers:
- Stronger protection against modern security threats
- Fewer password interruptions (no routine password expirations)
- Reduced MFA fatigue through risk‑based authentication
- Improved self‑service for employees (password reset, username recovery, account unlock)
- Seamless navigation across UKG applications with better session management
All new UKG authentication features and capabilities will be delivered exclusively through this platform.
When Action Is Required
All customers must complete the upgrade by June 1, 2026.
Access to the self‑service authentication upgrade tool has been activated and you can access this immediately. Your HRIS and IT teams will be responsible for completing the upgrade using the guided tool.
Who Needs to Be Involved
- HRIS Administrators – Own the upgrade process in UKG Pro
- IT / Identity Teams – Support SSO configuration and testing (if applicable)
- Internal Communications or HR – Notify employees of upcoming login changes
Support & Resources
- The upgrade tool includes built‑in guidance and validation steps (see below for a high level checklist and employee communication timeline)
- Detailed documentation is attached
- Recorded webinars are available – here
- Customers can optionally schedule time with a Customer Support representative to assist with the upgrade, please reach out during the month of April to schedule a support session.
Customer Action Checklist
Pre‑Upgrade Preparation
- Review and clean up user data:
- Confirm valid and unique email addresses where possible
- Address any username formatting issues identified in the pre‑upgrade checklist
- Identify your authentication method:
- SSO customers: Plan for Identity Provider (IdP) configuration updates
- Direct login customers: Review MFA settings and policies
- Ensure administrators have access to the Authentication Upgrade function – please reach out to the HCM Service Team if additional roles need access to the upgrade utility
- Confirm employees are prepared to use the UKG Pro mobile app (legacy apps will no longer be supported)
- Please refer to our blog post about the latest UKG Mobile App – here
Complete the Upgrade
- Launch the UKG Authentication Upgrade Tool which guides the administrator through pre‑checks, configuration, execution, and validation steps
- Follow the guided steps (typically completed in under 30 minutes)
- Validate access for:
- Direct login users
- SSO users
- Admin and standard user roles
- Confirm access to UKG Pro and any connected applications
Post‑Upgrade Validation
- Test login scenarios and navigation across UKG products
- Confirm MFA behavior (Adaptive MFA applies automatically when MFA is enabled)
- Verify self‑service functionality (password reset, username recovery)
- Review audit and security settings
- Prepare and send employee communications
Employee Communication Timeline
1–2 Weeks Before Upgrade
Audience: Leaders & Managers
- Share high‑level talking points:
- Why UKG is upgrading authentication
- Benefits for employees
- What employees can expect to change (or not change)
3–5 Days Before Upgrade
Audience: All Employees
- Announce the upcoming authentication update
- Reinforce:
- No action required yet
- Login will be easier and more secure
- Some users may see a new login experience or URL
Day of / After Go‑Live
Audience: All Employees
- Send targeted go‑live emails as applicable:
- Username format change (if applicable)
- Login URL change (if applicable)
- Both username and URL change (if applicable)
- Include:
- New login URL (if changed)
- Confirmation that passwords remain the same
- Where to get help if they have issues
What Employees Will Experience
- Fewer password‑related interruptions
- MFA prompts only when risk is detected
- Ability to reset passwords or recover usernames without contacting IT
- Seamless access across UKG applications
- A more secure login experience overall
