Overview
The Rhombus + Envoy Visitors integration enables organizations to automatically provision secure, mobile access for visitors. When a visitor is invited or signs in through Envoy, their access is synced with Rhombus to grant temporary entry based on predefined permissions.
This integration helps streamline the visitor experience with touchless entry, while maintaining security through automated access control, expiration, and audit logging.
PREREQUISITES
You will need super admin access to your Rhombus Systems console to complete this setup. Ensure you have administrative access or work with a local administrator before proceeding with the following steps.
Generate an API Key in your Rhombus console. You can do this under Settings / Integrations & Developer Resources / API Tokens.
Configure Access Control Groups in the Rhombus Console to determine which group your visitors will populate into. This is done under Settings / User management / Groups.
Create your group, then select which access grant(s) to assign. This controls which doors your visitors can unlock with their generated credentials. Learn more about grants.
Configuration
Step 1: Connect your Rhombus Systems account with Envoy
Navigate to your Envoy dashboard, click Integrations > All integrations and search "Rhombus Systems - Access Control." Click Install to begin configuration.
Click Authorize to allow Rhombus to access the Envoy data listed here.
Enter your API Key. Click Next Step to connect your Rhombus instance and continue to Visitor setup.
Step 2: Visitors
In this step, you'll configure how visitors will be granted access to your workplace via Rhombus.
Invite Only: Click the checkbox here to grant credentials only to invited visitors, ignoring walk-in visitors.
Access Configuration mode: Choose either Default Access (all visitors receive the same group and credentials) or Per-Flow Access.
Default Access:
Select the Rhombus Access Control Group that all visitor types will be added to. Select the default credential type.
(Optional) Visitor Blocklist: Select visitor flows that will not receive Rhombus credentials.
Access Duration: Define how long visitors will have access via Rhombus after their arrival time.
(Optional) Visitor Early Access: Set a time window to allow invited visitors to access your doors before their arrival.
Per-Flow Access:
Select the sign-in flow to configure with Rhombus. Select the Access Group, Credential Type, Access Duration, and Early Access Duration.
Click Add Another, then repeat this process for each visitor type you want to grant access to.
(Optional) Custom Field Mapping: If you want to track visitor information within Rhombus, you can map sign-in flow fields to Rhombus Custom Fields. This must be set up per sign-in flow.
Sign-out behavior: Controls what happens to a visitor's Rhombus account when they sign out or their invite is removed.
Once all required fields are set, click Complete setup to save.
Visitor Experience
Once the invite is created within Envoy, your guest will receive an email from Rhombus to create an account or log in to their app.
You can add the following instructions to your invitation email to help your guests navigate the Rhombus experience:
Our [company] uses Rhombus for access to our building(s). You'll recieve an invite email to set up your account. Please be sure to set this up prior to your arrival.
Once visitors log into Rhombus, they'll see the doors that correspond to their Access Group.
