HR, payroll and benefits · US and Canada

UKG Pro job changes and transfers, carried into every dealer system.

StitchOps takes hires, job changes, store transfers and terminations from UKG Pro and makes the matching changes in your DMS, CRM, lender and OEM portals. It covers US and Canadian rooftops, and keeps a record of every change.

Book a free workflow audit Get a demo

All supported dealer systems →

What's hard about UKG Pro today.

Hires and terminations get attention. Job changes do not. When a salesperson moves into F&I, or a service advisor transfers to another store, UKG Pro is updated but the old access usually stays. Over a year, people collect logins from every job they have held.

What StitchOps does in UKG Pro.

Role changes that follow the person

When UKG Pro shows a new job or a new store, StitchOps adds what the new job needs and removes what the old one had, across every dealer system.

New hires set up the same day

A new hire in UKG Pro gets logins in the DMS, CRM and the portals their job needs at their rooftop, without the office manager keying them in.

People who leave, removed everywhere

A termination in UKG Pro removes the person's access at every store, including lender and OEM portals that nothing else can reach.

Monthly check against UKG Pro

StitchOps compares every dealer system's user list with the people and jobs in UKG Pro, and flags both former employees and access that does not match the job.

US and Canadian stores

Groups with stores on both sides of the border run the same task. Canadian rooftops get their own lender and portal list.

Your HR data without a SCIM project

Connecting UKG Pro to other software can mean an API or SCIM project and extra fees. StitchOps skips that. It reads job changes and transfers the way your HR team sees them, so there is nothing new to buy or build.

Before and after.

The manual wayWith StitchOps

Salesperson moves into F&IF&I access added, sales access forgotten.New access added and old access removed in one task.

Advisor transfers to another storeLogins at the old store stay open.Old store access removed, new store set up.

Termination in UKG ProSome systems cleaned up, some not.Removed in every system at every rooftop.

Access that does not match the jobInvisible until an audit.Flagged in the monthly check.

What Okta covers for UKG Pro, and what StitchOps adds.

Okta signs users in and manages accounts where the app supports it in the Okta Integration Network. StitchOps covers the rest of the UKG Pro account lifecycle.

In the OIN with sign in and partial provisioning.

StitchOps covers 4 of 8 capabilities for UKG Pro.

What Okta covers for UKG Pro, and what StitchOps adds
Capability	Okta, from the OIN	StitchOps
Single sign on	SAML or OIDC from the OIN listing.	Not needed.
Shared accounts and MFA	Not part of the OIN listing.	Shares UKG Pro logins and their MFA across a team, with credentials kept in your vault.
Joiners	Creates accounts through the OIN connector.	Not needed.
Movers	Updates accounts through the OIN connector.	Not needed.
Leavers	No deprovisioning in the OIN.	Removes UKG Pro access the day someone leaves, anywhere a person can log in and act, and saves evidence of the removal.
Password rotation	Not needed for users who sign in with SAML or OIDC.	Rotates shared admin logins in UKG Pro on a schedule or after an offboarding.
Access reviews	No connector to read or remove UKG Pro accounts.	Pulls the UKG Pro user list on a schedule, compares it to your directory, and removes what you approve.
Audit evidence	Nothing logged inside UKG Pro.	Step level evidence for every action StitchOps takes in UKG Pro.

Single sign on
Okta, from the OIN
SAML or OIDC from the OIN listing.
StitchOps
Not needed.
Shared accounts and MFA
Okta, from the OIN
Not part of the OIN listing.
StitchOps
Shares UKG Pro logins and their MFA across a team, with credentials kept in your vault.
Joiners
Okta, from the OIN
Creates accounts through the OIN connector.
StitchOps
Not needed.
Movers
Okta, from the OIN
Updates accounts through the OIN connector.
StitchOps
Not needed.
Leavers
Okta, from the OIN
No deprovisioning in the OIN.
StitchOps
Removes UKG Pro access the day someone leaves, anywhere a person can log in and act, and saves evidence of the removal.
Password rotation
Okta, from the OIN
Not needed for users who sign in with SAML or OIDC.
StitchOps
Rotates shared admin logins in UKG Pro on a schedule or after an offboarding.
Access reviews
Okta, from the OIN
No connector to read or remove UKG Pro accounts.
StitchOps
Pulls the UKG Pro user list on a schedule, compares it to your directory, and removes what you approve.
Audit evidence
Okta, from the OIN
Nothing logged inside UKG Pro.
StitchOps
Step level evidence for every action StitchOps takes in UKG Pro.

Okta coverage from the Okta Integration Network, read October 10, 2026. UKG Pro on okta.com StitchOps for Okta →

SCIM and API tax

What UKG Pro charges to automate accounts.

UKG Pro does not offer SCIM provisioning on any plan. There is no SCIM tax to pay, and no plan that lets your identity provider create, change and remove UKG Pro accounts through SCIM.

Pricing notes

StitchOps correction: UKG Pro does not accept SCIM provisioning into UKG Pro; identity providers read employees from it.

Last verified 2026-10-06 (estimate). Source · SCIM pricing for every app · Method

Estimate UKG Pro and your other apps

Employees

Apps (up to 5)

Loading prices.

Tune it in the full calculator

Expected scenario, list prices, SSO required, default department shares.

Common questions.

Is UKG Pro the same as UltiPro?

Yes. UKG Pro was formerly called UltiPro. StitchOps works the same way with either name on the login screen.

What happens when someone changes jobs but stays at the same store?

StitchOps compares the new job's list of systems with the old one, adds what is missing and removes what is no longer needed.

Does this work for our Canadian stores?

Yes. StitchOps logs in the way your staff does, so it covers Canadian rooftops and their lender and OEM portals in the same setup.

Do you need a UKG Pro admin login?

StitchOps needs a login that can see hires, job changes and terminations, kept in your password vault. It runs only on a secure computer inside your network, and the AI never sees it.

Can it pull reports from UKG Pro?

Yes. Payroll and headcount reports the controller downloads by hand today can be pulled on a schedule and saved where they expect them.

Do we need a UKG API or SCIM connection?

No. StitchOps reads changes from UKG Pro the way your HR team does. If your IT team already has a connection in place, StitchOps can use it instead.

Does UKG Pro support SCIM?

No. UKG Pro does not offer SCIM provisioning on any plan, so accounts are created and removed by hand, by file import, or by a tool that works in UKG Pro the way an admin would.

Can UKG Pro accounts be automated without upgrading?

Yes. StitchOps creates, changes and removes UKG Pro accounts on the plan you already have, triggered by the events your identity provider already sends. It uses an API when one exists and works anywhere a person can log in and act when one does not.

Is UKG Pro in the Okta Integration Network?

Yes. As of October 10, 2026, the OIN lists UKG Pro with SAML, SWA sign in and provisioning to create and update users.

Can Okta deprovision UKG Pro users?

Not through an OIN connector. StitchOps removes UKG Pro accounts the day someone leaves, anywhere a person can log in and act, and saves evidence of each removal.

For your IT team

Where it runs: An agent runs an unattended desktop session on a dedicated worker VM in your environment, on Windows or macOS. It connects outbound only over TLS 1.2 or later. No inbound ports are opened.
Credentials: Credentials stay in your vault (1Password or Keeper) or in the StitchOps vault, encrypted with AWS KMS and resolved on the worker at run time. Models never see the values.
Identity systems: Changes in Okta, Entra ID or Active Directory can start a task. StitchOps carries them into dealer systems that have no SCIM or API. JumpCloud is supported through our joint program. StitchOps is listed in the Okta Integration Network.
APIs where they exist: Where a system offers an API, such as Authenticom DealerVault or Fortellis, StitchOps uses it. Everything else runs through browser or desktop automation, anywhere a person can log in and act.
Logs and telemetry: Every run keeps step level logs with status, timing and redacted results. Telemetry is content free: no field values, no personal data, no screenshots.
Security reviews: SOC 2 Type 2 audit completed. ISO 27001 certified. Penetration tested by a third party. The security packet is shared under NDA.
AI assistants: Approved tasks are available as MCP tools to Claude, ChatGPT and Copilot. Destructive actions need explicit confirmation.

Last updated October 2, 2026. Product names are trademarks of their respective owners. StitchOps is not affiliated with or endorsed by them.

See it run in your UKG Pro.

Fifteen minutes on your top three manual jobs. We tell you which one to hand off first.