How To Access And Navigate The Hershey HR Portal: Complete Employee Self-Service Guide

The Hershey HR portal functions as the enterprise access point for active staff, supply chain plant personnel, and alumni to manage payroll, health benefits, and time tracking. Authorized users authenticate through corporate Single Sign-On (SSO) infrastructure using an assigned Employee ID and multi-factor authentication (MFA). Critical self-service operations, including direct deposit routing updates and annual open enrollment, process through strict bi-weekly cutoff deadlines and identity verification protocols.

Credentials and Technical Requirements for Hershey System Access

Accessing company systems requires specific identity credentials issued during employee onboarding, alongside supported hardware and security software. Ensure all verification assets are assembled before initiating a portal session.

• Identity Credentials and Identifiers: An active, enterprise-issued Employee ID number (typically a 6-to-8 digit alphanumeric string), network username, and linked corporate or verified personal email address.
• Security and Authentication Tools: A mobile device or registered hardware token loaded with the designated enterprise authentication client (such as PingID or Microsoft Authenticator) configured for time-based one-time password (TOTP) or push verification.
• Network and Browser Infrastructure: A modern web browser with TLS 1.3 protocol support enabled (such as Google Chrome, Microsoft Edge, or Apple Safari) updated within two release cycles. Corporate-issued hardware must connect via the internal virtual private network (VPN) if accessing internal human capital management (HCM) nodes off-site.
• Compliance and Setup Thresholds: Initial portal provisioning requires 10 to 15 minutes of uninterrupted connectivity. Profile security updates, such as security question resets or secondary phone verification, require instantaneous confirmation to prevent automated account locks.

Step-by-Step Authentication and Portal Management Workflow

Step 1: Navigating to the Secure Enterprise Gateway

Accessing the correct portal node prevents phishing exposure and access credential lockouts.

1. Open a secure browser session on an enterprise workstation or approved personal device.
2. Enter the official web address for Hershey Employee Self-Service (ESS) or the designated external identity provider gateway.
3. Observe the browser address bar to confirm a valid SSL/TLS certificate issued to The Hershey Company or its authorized identity management vendor.
4. Input your corporate email address or primary network username into the identity provider landing page, ensuring no trailing spaces or casing errors.

Pro-Tip: If logging in from an external, non-company-owned network, bypass legacy bookmark redirects. Bookmarks often cache outdated session tokens, triggering authorization failures.

Step 2: Executing Multi-Factor Authentication (MFA)

Hershey implements strict conditional access policies that require real-time second-factor validation on every external or unregistered device.

1. Submit your network domain password.
2. When prompted by the identity platform, choose your registered verification channel: push notification, hardware token, or automated SMS passcode.
3. Approve the authentication request on your registered mobile device within the 60-second operational window.
4. If utilizing biometric verification (Face ID or fingerprint scan within the authenticator application), complete the local verification to pass the cryptographic assertion to the Hershey login framework.

Warning: Entering incorrect MFA passcodes three consecutive times will lock your corporate account for a mandatory 30-minute security window or require a manual identity unlock from the IT Service Desk.

Step 3: Accessing and Downloading Payroll Records and Tax Forms

The compensation module stores electronic pay stubs, year-to-date tax balances, and annual W-2/1099 statements.

1. Navigate to the Pay or Compensation tile on the primary dashboard after reaching the central interface.
2. Select the desired pay period from the historical statement list to view gross earnings, pre-tax deductions, employer contributions, and net distribution.
3. Download the pay slip in PDF format by clicking the print/export icon in the upper right quadrant of the viewer.
4. To access year-end tax documentation, select the Tax Documents sub-tab, locate the relevant calendar tax year, and click the link to generate your official IRS-compliant Form W-2.

Step 4: Modifying Direct Deposit and Banking Allocations

Employee banking details are protected under enhanced zero-trust policies that require secondary authentication prior to modification.

1. Within the payroll module, click Direct Deposit or Payment Elections.
2. Review existing account details; to alter an existing account, select Edit, or choose Add Account to split distributions across multiple financial institutions.
3. Enter the 9-digit American Bankers Association (ABA) routing transit number for your financial institution.
4. Input the accurate checking or savings account number twice to prevent typographical errors.
5. Define the allocation rule: assign either a specific dollar amount, a whole percentage, or select the remaining balance option for your primary account.
6. Submit the change request prior to 11:59 PM Eastern Time on the designated payroll cutoff day (normally the Sunday prior to the scheduled pay date) for the adjustments to reflect in the active pay cycle.

Warning: Updates initiated after the bi-weekly payroll freeze will not take effect until the subsequent pay cycle, routing your immediate earnings to the prior account on file.

Step 5: Executing Benefits Enrollment and Life Event Updates

The benefits administration node houses medical, dental, vision, life insurance, and 401(k) election frameworks.

1. Access the Benefits tile from the main self-service navigation menu.
2. During the Annual Open Enrollment window, select Start Enrollment to launch the plan selection wizard.
3. Review plan comparison matrices, paying explicit attention to high-deductible health plans (HDHP) versus preferred provider organization (PPO) deductibles, out-of-pocket maximums, and Health Savings Account (HSA) employer seed thresholds.
4. For off-cycle plan modifications, select Life Events (such as marriage, birth/adoption of a child, or loss of outside coverage). Upload supporting civil documentation within 30 calendar days of the qualifying event.
5. Review the final election summary page, electronically sign the acknowledgment statement, and download the confirmation statement for personal record-keeping.

Step 6: Logging Time Off, PTO, and Shift Scheduling

Depending on whether your operational role is salaried corporate, retail, or manufacturing supply chain, time tracking adheres to specific attendance protocols.

1. Select the Time and Absence or Attendance module on the central dashboard.
2. Review your balance ledger to confirm accrued, used, and remaining Paid Time Off (PTO), floating holidays, or sick leave allowances.
3. Choose Request Time Off, identify the designated absence type, and enter the continuous calendar range or single-day fractional shift hours.
4. Review the dynamic total against your remaining balance limit to ensure you do not enter a negative accrual status unless explicitly covered under local labor agreements.
5. Click Submit to route the digital authorization request directly to your line manager's workflow inbox.

Hershey HR System Modules, Functions, and Access Parameters

Common Portal Errors and Technical Resolutions

Enterprise cloud architectures periodically experience session timeouts, credential drift, and network routing discrepancies. Use these diagnostic workflows to resolve login and transactional interruptions.

SSO Redirection Loop or "Access Denied" HTTP 403 Response

• Root Cause: The web browser is holding expired security tokens, stale identity assertions, or conflicting identity headers from an alternative Microsoft/enterprise tenant.
• Actionable Fix: Clear your browser cache and cookies specifically for all identity federation domains. Open a private browsing session (Incognito/InPrivate) and manually navigate to the core Hershey employee entry URL. If using a corporate laptop off-site, verify that your corporate VPN connection is established and healthy before launching the browser.

Authentication Client Synchronization Failure on Mobile Devices

• Root Cause: The multi-factor application (e.g., PingID or Microsoft Authenticator) has lost device cryptographic pairing following an operating system upgrade, restore from cloud backup, or local device time drift.
• Actionable Fix: Open the settings interface on your mobile device and switch your time zone settings from manual to automatic to ensure the hardware clock accurately synchronizes with internet time servers (NTP). If pairing is completely broken, use the portal's alternate verification method (such as an SMS backup code) to log in, navigate to Security Settings, revoke the old device profile, and register the new device via QR code scan.

Inability to Alter Direct Deposit / Banking Settings

• Root Cause: The self-service portal freezes payment election changes during open payroll processing windows, or your corporate account has a security hold due to a recent password reset.
• Actionable Fix: Verify the date against the corporate payroll calendar. If the submission falls between Monday and Friday of a payroll disbursement week, wait until the following Monday morning when the transaction processing window reopens. If the account is locked following security modifications, contact the Hershey Employee Service Center to manually clear the fraud prevention lock.

Separated or Retired Personnel Inaccessible Dashboard

• Root Cause: Corporate domain usernames and standard SSO credentials deactivate immediately upon employee termination or retirement status transition.
• Actionable Fix: Do not attempt access via the active employee SSO page. Navigate directly to the external Alumni/Retiree portal interface. Authenticate using your registered personal email address and the dedicated external password created during the offboarding exit interview. If unconfigured, reach out to the Hershey HR Shared Services Help Desk with your legacy Employee ID and Social Security Number to obtain a secure external W-2 access token.

Frequently Asked Questions

How do former Hershey employees access their W-2 forms after leaving the company?

Former employees retain access to tax documents through a dedicated alumni portal rather than the active internal SSO gateway. Login credentials must be established using a personal email address on file with HR at the time of separation. W-2 forms for the preceding tax year become accessible via this external portal by January 31.

What is the deadline for updating direct deposit information before a pay date?

Direct deposit modifications must be submitted and confirmed in the system no later than 11:59 PM Eastern Time on the Sunday preceding the bi-weekly Friday pay distribution. Changes submitted after this cut-off window are held and applied to the following pay period without exception.

How can factory or supply chain personnel access the portal without a company-issued computer?

Manufacturing and hourly employees can access the portal via their personal mobile devices, home computers, or dedicated HR kiosks located in the break rooms and administrative areas of Hershey manufacturing plants. Mobile access requires downloading the enterprise authenticator application to complete MFA security checks.

Why does the portal state that my benefits coverage is locked?

Outside of the annual open enrollment period, benefits selections are legally locked under Section 125 of the Internal Revenue Code. Alterations require a Qualifying Life Event (QLE), such as marriage, birth of a child, divorce, or changes in spousal employment. Documentation verifying the event must be uploaded within 30 days of the occurrence to unlock the module.

What should I do if my MFA device is lost, stolen, or replaced?

If you can no longer access your primary MFA hardware, navigate to the portal login page and select the option to verify via secondary backup methods, such as an alternative phone number or recovery code. If no secondary methods were configured, call the Hershey Enterprise IT Service Desk to verify your identity and receive a temporary bypass code or initiate an MFA device unbinding.

Modernize Your Enterprise Human Resource Systems

Navigating complex human capital portals requires robust identity controls, timely administrative action, and disciplined self-service management. Coordinate with your department administrative leads and enterprise IT specialists to maintain clean identity records and ensure continuous access to your employee profile.