How it works
A new hire is added in UKG.
Connect to AD checks your provisioning rules.
The account is created in Active Directory or Entra ID with the right name, OU and groups.
What you can do
Create accounts only for the employees you choose, for example active employees.
Set logon name formats with fallbacks, like john.doe or j.doe.
Generate a secure default password
Use UKG Onboarding to have accounts ready before day one.
Example rule
Person.PreferredName + "." + Person.LastName → john.doe