<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y0000AZaZ1RSQVOkta Classic EngineIntegrationsAnswered2024-04-16T09:57:51.000Z2021-03-04T17:02:52.000Z2021-05-18T17:43:39.000Z

7bud9 (7bud9) asked a question.

Continuous and multiple errors between Okta and UKGA

I'm the admin for our company's UKG platform. We continuously hear from new employees (and even some legacy employees) that they are having trouble getting into UKG from Okta.

 

Here is what I typically hear:

* If employee presses UKG tile on Okta then they get a "session has expired" error message. They have cleared their cache and browsers. Additionally these new employees confirm they haven't ever previously signed into UKG. We expect new employees to click on the tab, confirm identity (though providing SSN, name, then clicking on a link in an authorizing email that Okta sends) then get into their UKG accounts after some initial setup steps. But these other new employees don't have that happening. I can confirm they are active in UKG and have nothing missing on their user accounts. The weird thing is that UKG is showing as though they HAVE logged in even when they attempt to access it, even though they get the "your session has expired" error message.

 

* Some employees get directed to UKG after clicking on the tile in OKTA but it immediately signs them out and, again, tells them their session is expired.

 

Could you please help? THank you so much in advance!


  • Hi Jess,

     

    This is Alex from Okta Support,

     

    I recommend opening a ticket with Okta support as further investigation of your setup is required before we can provide an accurate answer.

     

    Thank you.

    Expand Post
  • 6nf2q (6nf2q)

    Hi Jess, two things I have found on my end.

    1) Okta documentation has an error as the IdP can't initate the SSO only the provider (UKG) can so sometime we get time outs from too many redirects and had to replace the Okta tile with an Okta Bookmark.

    2) When we went live last August we had some users get prompted to confirm their identity while others didn't. Once we disabled direct login within UKG then it seems to have cleared up those items.

     

    Hope that helps, also let me know if you have UKG as a Master for Okta. I am currently running into an issue with getting pending hires staged. https://ideas.okta.com/app/#/case/114907

     

     

    Expand Post
This question is closed.
Loading
Continuous and multiple errors between Okta and UKGA