The UKG Ready integration enables HR, IT, and compliance teams to sync personnel data (such as start dates, separation dates, and employment status) from UKG Ready into Drata so you can monitor the right personnel for compliance and automate access-related workflows.
Key Capabilities
Sync personnel records from UKG Ready into Drata (names, emails, employment status, and key HR attributes needed for compliance monitoring).
Reduce “Unknown” personnel statuses in Drata by using HRIS as a source of truth for employment state, including former employees and leaves of absence.
Support automated HRIS-related tests and reviews that rely on accurate hire dates, termination dates, and employment status for in-scope personnel.
Prerequisites & Data Access
Required Drata role
Admin
Workspace Manager
DevOps Engineer
Access Reviewers can view the Connections page but cannot make changes.
Before you start in Drata
Your identity provider (IdP) should already be connected so personnel records can be matched and linked correctly.
Required access in UKG Ready
Administrator (or equivalent) access in your UKG Ready tenant.
Permission to configure:
Security Profiles
Service Accounts
REST API Resources and related HR/Payroll permissions
Step-by-Step Setup
Step 1: Collect required UKG Ready information
When you start the UKG Ready connection in Drata, you’ll be asked for:
Domain
Company Short Name
API Key
Service Account User ID
Service Account Password
You’ll gather or create each of these in the following steps.
Step 2: Enter your Domain in the Drata linking flow
Determine the domain you use to sign in to UKG Ready.
Example: if you sign in at
acme.com/ta/Default.login, your domain isacme.com.
Enter this Domain value in the corresponding field.
Step 3: Find your Company Short Name
Sign in to UKG Ready.
In the upper-left, open the main menu.
Select the settings icon.
Go to Global Setup → Company Setup.
Open Company Info.
Scroll to the Company Address section and locate Company Short Name.
Copy your Company Short Name.
Paste the Company Short Name into the UKG Ready connection in Drata and select Submit.
Step 4: Find or generate your API Key
From the same Company Setup page in UKG Ready, select Login Config.
Scroll to API Keys.
If an API key already exists:
Select the eye icon to reveal the key.
Copy the API Key and store it in a secure location.
If no API key exists:
Select Generate to create a new key.
Important: If other integrations already rely on an existing key, do not regenerate it; coordinate with your internal owners before making changes.
Paste the API Key into the UKG Ready connection in Drata and select Submit.
Step 5: Configure a UKG Ready Security Profile for Drata
Create a dedicated Security Profile that contains all permissions required for the integration.
In the left navigation, go to Settings → Profiles/Policies → Security.
Select New Security Profile in the upper-right.
Configure the following permissions within this profile (labels may vary slightly by environment):
HR tab
Under Employee Management:
Base Remuneration → set to View.
Benefit Management (Plans) → View.
Cost Centres → View.
Total Compensation → View.
HR Custom Values → View.
TLM (Time & Labor Management) – if you want time-off data
Navigate to Time Off Requests and enable the recommended view/manage permissions for your use case.
Under Leave of Absence Management (near the bottom), select Manage Requests, if applicable.
Modules tab (if available)
Under Rest API Resources, enable the following resources:
Employee Demographics
Employee HR Custom Fields
Employee Profiles
Employee Pay Information
Employees
Employees (Changed)
Employees (me)
Under Accruals, set Accrual Balances (2.0) to View.
Global tab (if available)
Under Global Setup, set the following to View:
Company Country/Legal Divisions
Cost Centre Definitions
Leave of Absence Custom Fields Definitions
Under Object Lists, set View for:
Company EINs
Cost Centers
Leave of Absence Categories
Pay Period Profile
Payroll tab (if applicable)
In the Payroll section:
Enable Create/Edit Payroll and View/Edit/Add next to payroll adjustment (as required by your UKG Ready configuration).
Select Payroll Prep Process.
Note: If you restrict or remove some of the compensation- or payroll-related permissions above, Merge and Drata may receive 403 errors and fail to sync key employment data (for example, employment status). Coordinate with your security and compliance teams before changing the scope of this profile.
Save the Security Profile when you’re finished.
Step 6: Create a service account in UKG Ready
In UKG Ready, go to Settings → Global Setup → Company Setup.
Select Edit Tabs.
In the Available Windows list (right side), scroll to Service Accounts.
Drag Service Accounts into the Top section in the middle layout.
Select Save.
Back in Company Setup, open the new Service Accounts section.
Select Add Service Account and configure:
Username and Password for the service account.
Security Profile: choose the Security Profile you created for Drata.
Account Groups: select the magnifying glass and choose All Company Employees (or the group that includes all in-scope employees).
Save the service account.
Step 7: Connect UKG Ready in Drata
In Drata, open the left navigation and go to Connections.
Select the HRIS category, then the Available tab.
Search for UKG Ready and start the connection flow.
In the UKG Ready connection drawer, enter:
Domain (from Step 2)
Company Short Name (from Step 3)
API Key (from Step 4)
Service Account User ID (from Step 6)
Service Account Password (from Step 6)
Submit the form to complete the connection.
Expected outcome: The UKG Ready connection appears as Connected in Drata, and personnel data begins syncing from UKG Ready on the next scheduled HRIS sync.