Overview
Allowing walk-up in the Advanced approvals policy builder enables walk-up visitors to be routed through the same policy as invited ones, including its conditions, data collection, and approvals.
Turn it on when operational exceptions shouldn't bypass policy requirements, such as trade compliance screening, background checks, or site-specific access rules. Leave it off to restrict the policy to planned visits and redirect walk-ups to request an invite.
Enable walk-ups
Turn on via policy Entry settings
In the Policy builder, click the Workflow trigger at the start of your workflow. The Entry settings panel opens on the right.
Toggle Allow walk-up to on. The workflow trigger label updates to Host creates invite or walk-up.
Once your workflow is complete, click Publish at the top of the page to create the new policy version and associate it with the sign-in flows.
What the toggle controls
Allow walk-up off (default):
Every sign-in flow associated with this policy is hidden from the iPad. Walk-up visitors cannot start these flows.
Invited visitors can still sign in as usual. An approved invite lets them through regardless of iPad visibility.
Allow walk-up on:
Every sign-in flow associated with this policy is shown on the iPad.
Walk-up visitors can select one of those flows and are routed through the exact same policy, including all conditions, data collection, and approval steps.
Invited visitors continue to sign in as usual.
Important Notes:
Allow walk-up is a policy-level setting, not a per-flow setting. Every sign-in flow linked to the policy inherits the same iPad visibility. If you need walk-ups allowed for some flows but not others, split them across separate policies.
Allow walk-up only affects unexpected visitors. This setting never blocks invited visitors; their invite always permits sign-in.
Update kiosks before enabling walk-ups
Make sure your iPad kiosks are on Envoy Visitors 5.62.0 or higher before turning on walk-ups for a policy. On 5.62.0 and above, invited guests won't see the policy field data the admin already submitted in their invite, keeping the sign-in flow secure.
Walk-up guests can submit their own responses on any version.