Single sign-on (SSO) lets employees open Employee Navigator straight from their payroll self-service portal with one click and no second username or password. It is included at no extra cost with every payroll integration that supports it and works alongside the regular Employee Navigator login. Which partners offer SSO is listed in Who we integrate with and on each partner's page in the Payroll Integration Hub.
What to know before you share the link
- Employees must be connected within the integration for SSO to work. Confirm the Connected count in your Employee Stats before directing employees to use SSO.
- SSO is for employee records only. Anyone with an HR User profile in Employee Navigator must continue to log in manually. This is a security restriction because of the volume of personal data an HR User login can access.
- SSO is not available from payroll partner mobile apps. Employees use it from their desktop or laptop login to their payroll partner's self-service account.
How single sign-on works
The employee clicks the Employee Navigator link in their payroll portal while signed in. SSO combines two IDs the integration already knows: the Company ID, which is mapped for the integration, and the employee's Payroll ID, which is linked within the integration. Together they route the employee directly into their own profile in Employee Navigator. If an employee is blocked, SSO won't work until they are unblocked from Payroll tab → Blocked Demographic List.
Where employees find the link, by payroll partner
ADP
An administrator must add the SSO link to employee home pages before employees can use it. Follow the steps for your specific ADP platform.
ADP Workforce Now® (Admin setup required): 1. Log into Workforce Now as an admin → click 'Configure Homepage' in the upper right-hand corner of the homepage 2. Click on the Actions ellipsis next to 'Helpful Links' → Edit → scroll down and toggle this to 'Active' 3. Add a Tile Title and paste the SSO URL into the URL field → Add 4. Under 'Security Profiles' — select only 'Standard Employee' → Save SSO URL — ADP Workforce Now®: https://www.employeenavigator.com/benefits/account/login?idp=AdpWorkforceNow
ADP Workforce Now® Next Generation (Admin setup required): 1. Log into Workforce Now Next Generation as an admin → click 'Manage' next to Helpful Links 2. Set 'Add Links' to 'An External Page' · Name it 'Employee Navigator SSO' 3. Paste the SSO URL into the URL field 4. Under 'Visible to these Profiles' — select only 'Standard Employee' 5. Click 'Add Links' — appears on employee homepages on next login SSO URL — ADP WFN Next Generation: https://www.employeenavigator.com/benefits/account/login?idp=AdpWorkforceNowNextGen
RUN Powered by ADP® (No admin setup needed): ADP RUN lacks Quick Link functionality. Share the URL below for employees to bookmark instead. 1. Share the SSO URL below with employees to bookmark 2. If the employee is already logged into ADP RUN, the link redirects them directly into Employee Navigator 3. If the employee is not logged in, they'll reach the standard Employee Navigator login page SSO URL — RUN Powered by ADP®: https://www.employeenavigator.com/benefits/account/login?idp=AdpRun
Alliance HCM
SSO is available with Alliance HCM, but step‑by‑step instructions aren't published here yet. Contact Alliance HCM to ask where the Employee Navigator link appears in their employee self‑service portal. Partner page: https://support.employeenavigator.com/hc/en-us/articles/217500506-Payroll-How-our-integration-works#alliance-hcm
DM Payroll
Log into the DM Payroll employee self-service portal → click 'Benefits.' This instantly hops you into Employee Navigator via SSO.
HowardSimon
SSO is available with HowardSimon, but step‑by‑step instructions aren't published here yet. Contact HowardSimon to ask where the Employee Navigator link appears in their employee self‑service portal. Partner page: https://support.employeenavigator.com/hc/en-us/articles/217500506-Payroll-How-our-integration-works#howardsimon
isolved
Navigate to the left-hand menu in isolved Self Service → click "Third-party Apps" → "Employee Navigator." This instantly logs you in via SSO.
Netchex
Log into the Netchex employee self-service portal → click 'Benefits' on the left-hand side. This instantly hops you into Employee Navigator via SSO.
Paycor
The Employee Navigator SSO link is in the employee Profile left navigation (the 3-bar menu in the upper left-hand corner). 1. Log into Paycor 2. Click the three bars (☰) in the upper left-hand corner 3. Go to People → Benefits → click "Employee Navigator"
Paylocity
Navigate to the left-hand menu in the Paylocity Self Service portal and click "Employee Navigator." This will instantly log you into Employee Navigator via SSO.
Note for Rehires: The SSO link is not available to rehires by default. From the Personal > Access tab of their Person Record, click Edit SSO Integrations → Add → and configure the Partner, Transaction, Entity, and User Formatted fields.
Payroll Resource Group
SSO is available with Payroll Resource Group, but step‑by‑step instructions aren't published here yet. Contact Payroll Resource Group to ask where the Employee Navigator link appears in their employee self‑service portal. Partner page: https://support.employeenavigator.com/hc/en-us/articles/217500506-Payroll-How-our-integration-works#payroll-resource-group
ProLiant
Log into ProLiant's employee self-service portal → click 'My Benefits' → Benefits tab. This will instantly launch Employee Navigator — no separate login required.
UKG Ready
An HR administrator must enable the SSO link in UKG Ready before employees can access it.
Admin Setup: 1. UKG homepage → Settings → Profiles & Policies → Security 2. Click the Edit (pencil) icon on the Employee security profile 3. Search bar (far right) → search "Navigator" 4. Check the "Employee Navigator" checkbox → Save
Employee Access (once enabled): 1. Log in → My Info → My Benefits → Employee Navigator SSO 2. A new tab opens — employee authorizes Employee Navigator access to their account
Tracking SSO usage
HR can track SSO usage on the employee's Manage Login page: Used for SSO (any login that has used SSO), Auto-provisioned (true only for logins created through SSO; never changes), and Last SSO Login (blank if SSO has never been used).
Security and access
- SSO routes employees with the Company ID mapped for the integration and the Payroll ID linked to each employee. If an employee is blocked, SSO won't work until they are unblocked via Payroll tab → Blocked Demographic List.
- 2FA is not required when accessing Employee Navigator through SSO. It is only enforced on direct logins to employeenavigator.com.
- Never use an unsecured Wi-Fi connection. Use a LAN or secured Wi-Fi of 50 Mbps or higher.
Frequently asked questions
Will SSO work for HR Admin users in Employee Navigator?
Not at this time. HR Admins are asked to log in with their regular Employee Navigator credentials instead.
Can any company integrated with Employee Navigator use SSO?
Yes. Any company with an active integration with a payroll partner that supports SSO can use it, at no additional cost.
Is there an additional cost for SSO?
No. SSO is included with your existing payroll integration.
I already registered in Employee Navigator. Can I still use my existing credentials?
Yes. SSO and local Employee Navigator credentials work independently.
What if I want to log in to Employee Navigator directly, outside of SSO?
Complete the Employee Navigator registration to create a username and password. Both ways in stay available.
Is 2FA required when logging in through SSO?
No. 2FA is only enforced when logging in directly at employeenavigator.com.
Comments
0 comments
Please sign in to leave a comment.