Single Sign-On (SSO) for All Supported Partners
Allow employees to access Employee Navigator directly from their payroll self-service portal — no separate username or password required.
Employees must be connected within the integration for SSO to work. Confirm "Connected" status in your Employee Stats modal before directing employees to use SSO.
SSO is for employee records only — HR Users cannot use it. Anyone with an HR User profile in Employee Navigator must continue to log in manually.
This is a security restriction due to the volume of PII data accessible via an HR User login. We want to protect you and your employees.
SSO is not available via employee Mobile Apps
Employees can access Single Sign On through their desktop/laptop login to their payroll partner's self-service account.
Interactive SSO Demo
What SSO Looks Like for Employees
Step through the experience — payroll portal to Employee Navigator in seconds. No password needed.
Authenticating via SSO…
Verifying your identity — no password needed
Hello, John!
✅ Your enrollment is complete. You can still make changes for the next 24 days.
Sections 1–8: Accessing SSO by Partner
Navigate to the left-hand menu in the Paylocity Self Service portal and click "Employee Navigator." This will instantly log you into Employee Navigator via SSO.
The Employee Navigator SSO link is in the employee Profile left navigation (the 3-bar menu in the upper left-hand corner).
-
1Log into Paycor
-
2Click the three bars (☰) in the upper left-hand corner
-
3Go to People → Benefits → click "Employee Navigator"
An administrator must add the SSO link to employee home pages before employees can use it. Follow the steps for your specific ADP platform.
-
1Log into Workforce Now as an admin → click 'Configure Homepage' in the upper right-hand corner of the homepage
-
2Click on the Actions ellipsis next to 'Helpful Links' -- Edit -- Scroll down and toggle this to 'Active'
-
3Add a Tile Title and paste the SSO URL into the URL field -- Add
-
4Under 'Security Profiles' — select only 'Standard Employee' -- Save
-
1Log into Workforce Now Next Generation as an admin → click 'Manage' next to Helpful Links
-
2Set 'Add Links' to 'An External Page' · Name it 'Employee Navigator SSO'
-
3Paste the SSO URL into the URL field
-
4Under 'Visible to these Profiles' — select only 'Standard Employee'
-
5Click 'Add Links' — appears on employee homepages on next login
-
1Share the SSO URL below with employees to bookmark
-
2If the employee is already logged into ADP RUN, the link redirects them directly into Employee Navigator
-
3If the employee is not logged in, they'll reach the standard Employee Navigator login page
An HR administrator must enable the SSO link in UKG Ready before employees can access it.
Admin Setup
-
1UKG homepage → Settings → Profiles & Policies → Security
-
2Click the Edit (pencil) icon on the Employee security profile
-
3Search bar (far right) → search "Navigator"
-
4Check the "Employee Navigator" checkbox → Save
Employee Access (once enabled)
-
1Log in → My Info → My Benefits → Employee Navigator SSO
-
2A new tab opens — employee authorizes Employee Navigator access to their account
Navigate to the left-hand menu in isolved Self Service → click "Third-party Apps" → "Employee Navigator." This instantly logs you in via SSO.
Log into ProLiant's employee self-service portal → click 'My Benefits' → Benefits tab. This will instantly launch Employee Navigator — no separate login required.
Log into the Netchex employee self-service portal → click 'Benefits' on the left-hand side. This instantly hops you into Employee Navigator via SSO.
Log into the DM Payroll employee self-service portal → click 'Benefits.' This instantly hops you into Employee Navigator via SSO.
Section 9 — Logging In & SSO Management
SSO is an addition to the existing login process — not a replacement. Employees can log in via SSO from their payroll portal or directly from employeenavigator.com. Four supported scenarios:
-
1Previously registered in EN → continues using local EN credentials from employeenavigator.com
-
2Previously registered in EN → also uses the SSO link from the payroll portal
-
3Never registered in EN → uses SSO only from the payroll portal
-
4Uses SSO from payroll → later creates local EN credentials directly within EN
Navigate to the employee's Manage Login page within Employee Navigator to see three indicators:
- Employee Payroll IDs are the unique identifiers SSO uses to link records. If blocked, SSO won't work until unblocked via Payroll tab → Blocked Demographic List.
- 2FA is not required when accessing EN through SSO. It's only enforced on direct logins to employeenavigator.com.
- Never use an unsecured Wi-Fi connection. Use a LAN or secured Wi-Fi of 50 Mbps or higher.
Comments
0 comments
Please sign in to leave a comment.