Pull the punch report for the first Monday after a face recognition go-live: a line at the clock, a supervisor typing manual punches, employees whose fingerprints worked fine last week. UKG Ready and Pro WFM customers can reach face recognition through UKG devices or through CloudApper AI TimeClock for UKG, which runs on tablets you already own and syncs to UKG, so the first question is what the project will cost.

What UKG Does Natively

InTouch DX supports finger scan and TouchFree ID face recognition. UKG’s documentation treats finger and face as separate biometric types, each with its own consent captured at enrollment, and it supports non-biometric options for employees who decline.

Fingerprint to face migration risks infographic
The three costs of moving a fingerprint workforce to face recognition: re-enrollment, consent and fallback.

Where the Friction Shows Up

A finger template cannot be converted into a face template, so every employee re-enrolls. Multiply headcount by enrollment minutes at loaded wage and show your CFO that number first.

CloudApper-Solution-Community-for-UKG

AI TimeClock

Employee Time Clock

Capture employee time accurately with a smarter UKG time clock.

Consent is the second cost. Finger consent does not cover face capture, so the refresh is a new collection event. Illinois BIPA sets damages at $1,000 per negligent and $5,000 per intentional violation (740 ILCS 14/20), which is why our Illinois BIPA guide for UKG time clocks treats written consent as a go-live gate.

Third, face matching moves the exception queue rather than deleting it.

What to Do Within UKG First

  • Pilot one site for a full pay period.
  • Keep finger scan and badge or PIN active while employees enroll.
  • Capture face consent at enrollment. Retire finger scan only when failed matches are rare, then purge old templates per our template purge guidance.

For the fallback window, I recommend the pilot plus at least one full pay period, longer for union sites. Employees who decline can use a PIN and photo verification option, and bargaining units need the steps in changing the time clock in a union shop on UKG settled first.

Where Native Hardware Runs Out

TouchFree ID is an option on InTouch DX, so a fleet with older InTouch models turns a face migration into a hardware refresh. CloudApper AI TimeClock for UKG is the affordable alternative here: an iPad or Android tablet at roughly 25% of the cost of traditional UKG clocking hardware. Our InTouch DX replacement guide has the cost math.

CloudApper AI TimeClock for UKG

CloudApper AI TimeClock for UKG includes face recognition in the license. Employees enroll on the tablet, a consent screen can be configured into that flow, and PIN, QR or badge punches stay available on the same device, so the fallback window needs no second set of hardware. It syncs with UKG Ready and Pro WFM. Tablets can run beside existing terminals, as described in running InTouch DX terminals and tablet time clocks side by side.

CloudApper AI TimeClock face recognition kiosk infographic
CloudApper AI TimeClock pairs face recognition with PIN backup, UKG sync and offline capture on one tablet.

Frequently Asked Questions

Q: Do employees have to re-enroll when UKG time clocks switch from fingerprint to face?

CloudApper-Solution-Community-for-UKG

AI TimeClock

Employee Time Clock

Simplify employee time capture with an affordable UKG tablet time clock.

Yes. Finger and face are different biometric types, so each employee completes a new face enrollment. A fingerprint template cannot be converted into a face template.

CloudApper-Solution-Community-for-UKG

AI TimeClock

Employee Time Clock

Turn any iPad or tablet into an affordable UKG time clock.

Q: Does fingerprint consent cover face recognition?

CloudApper-Solution-Community-for-UKG

AI TimeClock

Employee Time Clock

Modernize UKG time tracking with AI-powered time capture.

No. Face capture is a separate collection, and UKG’s documentation treats finger and face consent separately. Obtain new written consent before any face enrollment.

Q: How long should the fingerprint fallback stay active after face recognition goes live?

A common practice is the pilot plus one full pay period, longer for union or multi-state sites. Retire it once failed matches are rare.

CloudApper-Solution-Community-for-UKG

AI TimeClock

Employee Time Clock

Replace expensive UKG time clock hardware with AI-powered tablets.

Q: Should fingerprint templates be deleted after the switch?

Yes. Once fingerprint is retired, purge the templates per your retention policy and applicable law.

Q: Can I use face recognition on UKG without buying InTouch DX terminals?

Yes. CloudApper AI TimeClock for UKG provides face recognition on a standard iPad or Android tablet and syncs punches to UKG Ready or Pro WFM.

If you are weighing a face migration against a hardware refresh, book a demo of CloudApper AI TimeClock for UKG and have your UKG admin validate the integration at one pilot site first.