CoreCivic employee access relies on centralized Single Sign-On identity management systems, primarily utilizing Okta and Microsoft Azure Active Directory portals to connect staff with Workday, UKG Kronos, and internal HR resources. Authorized employees access paystubs, benefits, shift rosters, and corporate webmail securely from personal or company-issued devices by completing Multi-Factor Authentication.
Core Infrastructure of CoreCivic Staff Systems
As one of the largest private corrections and detention management organizations in North America, CoreCivic operates a complex digital infrastructure. Accessing internal employee tools requires navigating strict identity verification protocols designed to safeguard sensitive operational data, offender records, and corporate resources.
The digital ecosystem for staff is organized around a unified Single Sign-On identity provider. Rather than requiring distinct account credentials for every human resources software application, CoreCivic utilizes a primary identity portal that routes credentials to dependent services.
- CoreCivic Identity & Access System
- Single Sign-On (SSO) Portal Gate (Okta / Azure AD Infrastructure)
- Multi-Factor Authentication (MFA) (Authenticator Push / SMS / Token)
- Workday HR & Payroll Service
- UKG / Kronos Staff Scheduling
- Microsoft 365 & Corporate Email
Understanding how these integrated systems communicate helps employees bypass common credential errors and locate necessary HR tools quickly:
- Identity and Access Management Gateways: Staff authenticating off-site pass through an Okta or Microsoft Azure AD authentication bridge. This step verifies identity against enterprise directory records before granting entry to core business tools.
- Human Capital Management: CoreCivic uses Workday as its central repository for human resources data. This application handles personal demographic updates, direct deposit management, tax elections, job history, and annual benefit open enrollment.
- Workforce Management and Scheduling: Facility-level scheduling, timekeeping, punch adjustments, and paid time off management rely on UKG Pro or Kronos integration, allowing shift workers and officers to monitor rosters.
- Corporate Communications: Staff members assigned digital mailboxes access Outlook Web App via Microsoft 365, integrated directly into the corporate single sign-on system.
- Learning and Compliance: CoreCivic University provides online training modules, mandatory annual compliance updates, and specialized correctional certification courses.
Authentication Requirements for CoreCivic Systems
Logging into CoreCivic software outside of a facility internal network requires specific credentials and verified secondary verification devices. The system enforces strict access policies to meet Criminal Justice Information Services compliance requirements.
Technical Prerequisites for Access
- Network Identity User Identification: Formatted as your assigned company email address or employee identification number combined with the corporate domain string.
- Enterprise Password: A password meeting company complexity standards, updated within the standard 90-day expiration window.
- Registered Authenticator Device: A secondary verification factor, such as the Microsoft Authenticator app or Okta Verify, configured on a personal or company-provided smartphone.
- Compatible Web Browser: Up-to-date installations of modern web browsers such as Microsoft Edge, Google Chrome, or Safari with JavaScript and cookies enabled.
| Portal Name | Primary Function | Access Requirement | Key Features |
|---|---|---|---|
| Workday HR | Payroll, Tax, HR Records | Active SSO + MFA Credentials | Paystubs, W-2 forms, Direct Deposit |
| UKG / Kronos | Timekeeping, Shift Rosters | SSO Access / Facility Intranet | Shift swaps, PTO requests, Timecard |
| M365 Portal | Webmail, SharePoint, Documents | SSO Credentials + Managed Device | Outlook, Teams, Enterprise Docs |
| CoreCivic U | Online Compliance Training | Standard SSO Account | Mandatory training, Certifications |
Logging into CoreCivic Employee Portals
Employees accessing systems from home or a personal mobile device must complete the following standard authentication process:
- Navigate to the Official SSO Gateway: Open an updated web browser and access the designated CoreCivic employee single sign-on entry page or official corporate resource link provided during onboarding.
- Input Account Identity: Type your full enterprise user principal name (typically
firstname.lastname@corecivic.comor your network username) into the initial username prompt and select Next. - Supply Enterprise Password: Enter your active password. If logging in for the first time or following a system reset, enter the temporary credentials supplied by facility HR or the helpdesk.
- Execute Multi-Factor Authentication: Check your registered mobile device for a push notification from your enterprise authenticator app, or enter the six-digit verification code generated by the app.
- Select Application from Access Hub: Once identity verification completes, the system lands on the employee portal dashboard. Click the target icon—such as Workday, UKG, or Email—to launch the application without secondary password prompts.
Network Policy Notice: Accessing facility-level information systems from non-approved locations or unencrypted public Wi-Fi networks is prohibited. Employees must handle personal data cautiously and avoid saving authentication tokens on shared computer hardware.
Managing Payroll, Benefits, and Shift Rosters
Self-service portals give staff direct control over administrative recordkeeping. Reviewing compensation history and modifying personal data can be handled directly online without submitting physical paperwork to facility HR coordinators.
Accessing Compensation Data and Tax Documents
Paystubs and year-end tax forms are accessible inside the Workday application:
- Paystub Download: Navigate to the Pay application icon within your dashboard, select Pay Statements, and choose the specific pay period date. Statements can be viewed or printed in PDF format.
- Updating Direct Deposit: Under the Pay menu, select Payment Elections. Staff can add new banking details, adjust account split percentages, or edit existing routing numbers. Changes made within five business days of a payroll cycle take effect on the following pay period.
- Retrieving Form W-2: Select Annual Tax Documents under the payroll sub-menu. Forms for current and prior tax years remain accessible online. Former employees retain access to a scaled-down portal to download necessary tax filings.
Viewing Schedules and Requesting Time Off
Facility operations rely on round-the-clock staffing. Managing work schedules and time-off requests takes place inside the UKG/Kronos portal:
- Shift Schedules: Select My Schedule on the UKG dashboard to view assigned shifts, post-assignments, and upcoming facility rotation details.
- Time Off Submissions: Open Time Off Requests, select the leave type (e.g., Paid Time Off, Bereavement, Military Leave), choose the target dates, and submit the request for administrative supervisor review.
- Timecard Adjustments: If a punch missing error occurs during a shift, use the Punch Adjustment tool to submit an edit request to your shift captain or unit supervisor.
Troubleshooting Common Login Failures
System outages, expired credentials, and device changes can interrupt access to employee portals. System errors typically display specific error codes that indicate how to resolve the access issue.
| Issue Reported | Primary Cause | Resolution Steps |
|---|---|---|
| Account Locked | Failed password attempts | Wait 30 minutes or use self-service portal |
| MFA Device Unresponsive | Phone replaced / app unlinked | Contact Enterprise Helpdesk for reset |
| Expired Credentials | Passed 90-day cycle | Reset via password portal on intranet |
| Network Access Denied | Unauthorized location / IP blocked | Use approved browser or facility terminal |
Account Lockouts After Invalid Password Attempts
Entering an incorrect password three to five consecutive times triggers an automatic lockout to prevent unauthorized credential guessing:
- Automatic Unlock: The system enforces an automatic lockout timer, typically clearing the lock after 30 minutes.
- Self-Service Password Reset: If you remember your identity questions or have an active MFA device, click the Forgot Password? link on the login page to initiate password recovery.
- Network Synchronization: After changing a password, update saved credentials on mobile devices (such as synced mail applications) to prevent background services from repeatedly sending old passwords and locking the account again.
Resolving Multi-Factor Authentication Issues
Replacing a smartphone or deleting the authentication app disrupts the secondary verification step. If push notifications do not arrive:
- Select Alternate Factor: Click Try another way on the MFA prompt screen to send a SMS code or direct voice phone call to your registered phone number.
- Helpdesk Factor Reset: If your phone number has changed, contact the enterprise technology service desk. Verification of identity details (such as employee ID and facility location) is required before helpdesk technicians reset registered MFA devices.
Security Compliance and Device Guidelines
CoreCivic operates under strict regulatory frameworks governing data privacy and correctional infrastructure safety. Using employee access software requires following standard cybersecurity rules.
Mobile Device Security Guidelines
Employees accessing company resources on personal mobile phones must maintain specific safety standards:
- Screen Lock Mandate: Any smartphone accessing employee self-service tools must have a PIN, passcode, or biometric lock enabled.
- Avoid Public Computers: Refrain from accessing payroll details or changing bank information on public internet terminals or shared library computers.
- Automatic Log Out: Always click Sign Out when ending a session on a web browser rather than simply closing the browser tab. This clears session tokens and prevents the next user from accessing your personal data.
Information Security Policy Notice: Sharing user credentials, writing down passwords near facility workstations, or permitting unauthorized individuals to view internal software interfaces violates enterprise security policies and can lead to immediate access revocation.
Frequently Asked Questions
How do former CoreCivic employees access historical W-2 tax forms?
Former employees can access previous tax documents through the designated CoreCivic former employee portal using their registered email identity. If self-service access has expired, submit a tax document request directly to the corporate HR payroll department.
Why is the Workday application rejecting my password?
Workday authentication runs through the core enterprise Single Sign-On gateway. If your login fails, your general enterprise network password may have expired or your account may be temporarily locked due to failed authentication attempts.
How do I update my phone number for multi-factor authentication?
If you can still log into the user self-service identity portal, navigate to security settings and add your new device. If you are entirely locked out of your account due to a phone change, contact the technology service desk to clear your old verification profile.
Can shift schedules be accessed through a smartphone app?
Yes, shift schedules can be accessed using the official mobile application associated with CoreCivic's workforce management provider (such as UKG Pro). Download the app from official application stores and enter the company system URL provided by facility HR.
What should I do if my paystub shows incorrect working hours?
Review your timecard records in UKG to confirm if a punch missing error occurred. Submit a punch edit request through the portal, then inform your local facility timekeeper or shift supervisor to ensure corrections process before the next payroll cutoff window.
Enterprise Contact and Support Resources
If you encounter technical errors that cannot be resolved through the self-service portal, contact the appropriate internal department for assistance:
- Enterprise IT Service Desk: For password resets, MFA unlinking, network account lockouts, and general computer hardware support.
- Facility HR Business Partner: For local shift corrections, personnel file inquiries, formal leave applications, and onboarding questions.
- Corporate Benefits Center: For health insurance claims support, qualifying life event updates, and retirement plan access assistance.
