How does this integration work?
Envoy sends visitor information to UniFi, which then provisions a temporary voucher for Wi-Fi access to your network. Upon sign-in, the visitor will receive an email (if you collect visitor email addresses) and/or text message (if you collect visitor phone numbers) with a voucher code for Wi-Fi access.
PREREQUISITES
You must collect either visitor email addresses or phone numbers at sign-in. Learn more about how to configure your Envoy sign-in fields.
Whitelist Envoy's Static IP addresses to allow a connection to your UniFi controller.
52.6.210.64
52.86.90.108
18.204.164.109
Obtain a copy of your API key from your UniFi system.
Local Application APIs → Network API required. Envoy uses the Network API, which is a local application API.
Additional purchase may be necessary. Please reach out to Ubiquiti support if you do not have the option to generate an API key on the controller.
Learn more in UniFi's developer documentation.
Enabling the Envoy + Ubiquiti UniFi integration
Step 1: API Details
Under Wi-Fi, find Ubiquiti UniFi (beta 2025). Click Install and then Configure.
Enter your UniFi Controller URL (on-prem IP and port, or Cloud URL). Example URL: https://136.xx.xx.xx:8443
Enter your API Token, then click Next Step.
Step 2: Network Site
Select your network site from the drop-down, then click Next Step.
Please ensure that this site has a guest network and guest portal configured.
Step 3: Visitors configuration
Skip to Step 4 if you're not planning to use Ubiquiti for Visitors.
Enter your Guest Network name that visitors will connect to.
Optional: Select Visitor types to block from receiving Wi-Fi credentials.
Optional: Send guest Wi-Fi credentials to hosts. This is useful when visitors cannot easily access email or text messages or are not required to enter their email address or phone number at sign-in.
Click Next Step.
After completing the Envoy Visitors installation, navigate to the Ubiquiti UniFi dashboard, then select Settings -> Guest Control. Find Authentication under Guest Policies and select Hotspot.
Step 4: Workplace
Ubiquiti Unifi integrates with Envoy workplace to automatically check employees in using two different methods: identity authentication via user email or Device authentication with MAC address.
Method 1: Identity authentication with user email
Auto-sign out must be enabled in Location Settings. If auto-sign out is disabled, then employees will remain signed in to the workplace and cannot be signed in the next day with their wifi connections.
For this method to work, the employee email addresses used in Unifi must match their Envoy email addresses.
There is no additional setup within Envoy for this method, so just click Complete Setup to save and finish.
Method 2: Device authentication with MAC address
For this method to work, you must have a record of Device MAC addresses mapped to the corresponding employee. Envoy only needs
emailandmac_address, so no other fields are necessary.Select the file from your computer and upload it.
Click Complete Setup to save and finish.
UniFi Network portal setup
Guest Control configuration example:
Wireless Networks configuration example:
FAQ
Have you updated to UID and having issues with your credentials?
You will need to update settings to allow previous admin credentials.
