Overview
Genetec ClearID is a cloud-based physical identity and access management platform that standardizes and automates access requests, approvals, and permissions through configurable workflows. The Genetec ClearID + Envoy Visitors integration enables organizations to automate and manage visitor access using policy-driven workflows. When a visitor is invited or signs in through Envoy, their access can be provisioned and governed in ClearID to ensure the right permissions are granted in line with your organization’s security policies.
PREREQUISITES
You must have Account Owner admin level permissions or equivalent within your Genetec instance
You'll also need:
ClearID API credentials (Client ID and Secret)
Your ClearID Account ID
Base URL and Auth Base URL for your ClearID instance
Configuration
Step 1: Info
Navigate to your Envoy dashboard, click Integrations > All integrations and search "Genetec ClearID." Click Install to begin configuration.
Read over the information and be sure to have all required keys on hand to complete the configuration steps.
Click Next.
Step 2: API Access
Enter your Auth Base URL for your ClearID instance. This is typically provided by Genetec during setup.
Next, enter your API Base URL.
Client ID: Enter your ClearID OAuth Client ID.
Client Secret: Your ClearID OAuth Client Secret.
Account ID: Your ClearID Account ID.
Once all fields are complete, click Next Step to connect your account and
configure your visitors settings.
Step 3: Visitors
Check the Invite Only box to skip provisioning access for walk-up visitors.
Visitor Access Duration: How long visitors will have access after arrival. Select a value from the dropdown.
(Optional) Visitor Early Access Duration: Allow invited visitors to access before their scheduled arrival time
Card number assignment: Select how card numbers should be assigned to visitors. Each assignment type has slightly different configuration steps.
Auto-Generate Card Numbers: Provide the Minimum Card Number, Maximum Card Number, Credential Format, and Facility Code.
Manual Card Assignment: Select the Credential Format and provide the Facility Code.
No Card Assignment: Skip card assignment and continue on to the next step.
Now, set the Access Level Configuration to decide how to assign ClearID Roles to visitors. You can select from:
Default Roles: All visitor types receive the same ClearID roles.
Select the Default role(s) that all visitors will receive.
Visitor Blocklist: Prevent sign-in flows from receiving credentials by selecting them here.
Granular Roles: Map different visitor types to different ClearID roles. Click Add Another for each visitor type you want to grant ClearID roles to.
(Optional) Save Sign-in Fields responses to ClearID: If you want to store Visitor data within ClearID, you can populate it based on sign-in flow fields. Select the field, then map it to the ClearID field. Click Add Another for each piece of data you want to save.
Permanently delete visitor records from ClearID when visitors sign out by checking the box next to Delete Visitor on Sign-Out. The visitor record will not be deleted from Envoy with either option.
Deleting is best for privacy-focused environments or one-time visitors.
Deactivating is best for compliance, auditability, and repeat visitors.
Click Complete Set-up to save and complete the configuration.