Once you've decided to automate the connection between UKG and your directory, the next step is choosing how. There are general-purpose identity platforms, custom integrations and tools built specifically for UKG. Each comes with trade-offs.

These 10 questions will help you compare them on what actually matters.

1. Which UKG products does it support?

UKG Pro, UKG Ready and UKG Onboarding work differently. Confirm the tool supports the product you use today and the one you might move to tomorrow.

2. Does it handle joiners, movers and leavers?

Creating accounts is the easy part. Ask to see a job change and a termination, not just a new hire.

3. Does it support Active Directory, Entra ID or both?

Make sure it fits your current identity model, whether that’s on-premises, hybrid or cloud-only, and that it can grow with you.

4. Where does it run, and where does our data go?

Some tools route your employee data through the vendor’s cloud. Others run in your own environment. Know which one you’re signing up for and what your security team will accept.

5. What permissions does it need?

A sync tool shouldn’t need domain admin rights. Look for one that works with dedicated, least-privilege service accounts.

6. Has its security been independently audited?

Ask for a SOC 2 Type 2 report. A Type 2 report shows that an auditor tested whether controls actually worked over a period of time, not just that they were designed.

7. How does it handle exceptions?

Every company has them: contractors, multiple companies, special naming rules, accounts that must stay disabled. Ask how the tool handles yours without custom code.

8. Can we preview changes before they go live?

A preview or test mode shows exactly what will change before anything is written to your directory. It’s the safest way to roll out.

9. How is it priced?

Per-user pricing grows every time you hire. Flat pricing stays predictable. Also ask what’s included for implementation and support, and what renewals cost.

10. Who helps us set it up?

An expert who knows UKG and Active Directory can save weeks of trial and error. Ask how many implementation hours are included and what support looks like after go-live.

How Connect to AD answers these questions

• Supports UKG Pro, UKG Ready and UKG Onboarding

• Handles new hires, job changes and terminations

• Works with Active Directory (on-premises and hybrid) and Microsoft Entra ID

• Runs as a Windows service in your environment, with outbound connections only

• Uses service accounts with read, insert and update permissions, with no domain admin required

• SOC 2 Type 2 verified

• Rules and conditions handle exceptions, with a preview before go-live

• Flat pricing with unlimited employees and no per-user fees

• 10 implementation hours with an expert, plus support Monday to Friday

See how we compare with your shortlist. Book a 30-minute demo, check our pricing, or try Connect to AD for free.