Setup the Environment

Connect to AD will work with either a single domain or multiple domains that exist within a forest.

An environment can be setup to target the root of a domain or a container within the domain.

If you intend to target multiple domains within a forest, you will need to setup an environment for each domain.

Connect to AD provides you with the flexibility to define the environments to meet complex use-cases. Here are some examples of environments you can setup.

1. Create an environment to work with the domain: 


 2. Create an environment to work with the domain:


3. Create an environment to work exclusively with active employees

4. Create an environment to work exclusively with terminated employees

5. Create an environment to work with the Users container in the domain


 6. Create an environment to work with the Sales Org Unit in the domain


7. Create an environment to work with a the Accounts org unit in the domain:


Each environments allows you to configure behavioral rules like the employees to work with (filter), the user provisioning requirements (including provisioning conditions) and each environment can be scheduled to run separately.

Do not enable an environment until you have reviewed the Identity Match and Auto provision rules as these rules determine the behavior of Connect to AD and a misconfiguration may result in unexpected results.

The Sync Type is used to determine which employees to include during the syncing process.

A full sync will process all UKG Pro employees and will typically take longer to complete.

A changes-only sync will only process recently changed UKG Pro employees and will complete in less time than a full sync.

We recommend that you initially use a full sync to get all your UKG Pro employees in sync with their matching Active Directory users and then later switch to a changes-only sync for better performance.

Next Setup the UKG Pro Connection