Email Addresses for the Authentication Upgrade

Required and optional email addresses for UKGAuthentication.

Because UKG Authentication allows the use of email addresses in addition to usernames for logging in, so no one can share or duplicate email addresses for the purpose of logins. Each person must have their own, unique Sign-On Email address.

The following email fields are available:

  • Email (not required, can be blank): Alerts and workflow notifications go to this email address. This Email address can be duplicated in multiple person records.

  • Sign-On Email (new and optional): Use this email address for Login, MFA, and Forgot Password functions. This address must be unique, and by default, the address is copied automatically from the Email field but only if that address is unique. If the Email field does not contain a unique address, Sign-On Email is blank. You can enter a Sign-On Email address in this field or by way of an API; then, Sign-On Email does not auto-populate from the Email address. If Sign-On Email is left blank, Login, MFA, and Forgot Password functions cannot be used.

    Note: To receive multi-factor authentication (MFA) access codes for user accounts that cannot use the Sign-On Email because of duplicate email addresses, use the MFA Policy to get the code by Authenticator or SMS.