How does Kisi work with Envoy?
The Kisi app works with Envoy to streamline access control for employees and visitors. With customization options, you're in control to decide not only which visitor flows receive access but also the level of access they are granted.
Envoy will generate temporary permission shares in Kisi for your enabled employees and visitors based on your criteria with automatic expiration, enforced by permission expiration in Kisi and customization in Envoy. Kisi access is emailed by Kisi to permitted visitor flows based on the email they provide during sign in.
Automatically assign visitors to access groups in Kisi.
Customize your visitors access by mapping multiple groups to different visitor types in Envoy.
Automatically expire visitors access after a pre-set duration or during sign out.
Restrict Kisi access to only invited visitors.
Automatically provide employees with building access after they’ve been approved through Workplace.
Kisi + Envoy Setup
Step 1: Create an administrative or group manage access account in Kisi.
To learn more, check out this guide from Kisi: Create an account and sign in to Kisi.
Step 2: Create a group in Kisi
To learn more check out this guide from Kisi: Create a group.
Step 3: Copy your API key from your Kisi account
Copy the API key from your Kisi Admin panel or under your Name (top right) > My Account > API Key.
If you do not see a secret key, look for a link titled "Show API Secret Key" below the Kisi admin username.
Step 4: Install the Kisi app in Envoy
Navigate to Apps > Access Control in the Envoy dashboard.
Search for Kisi under Access Control.
Click Install under Kisi.
Authorize the permissions between Kisi and Envoy.
Input the API key copied from your Kisi account.
Select the Places (and their related groups from Kisi) where you would like to enable Envoy visitors.
Note: Places in Kisi represent a physical space (i.e. an office or a building) within an organization that uses Kisi. To learn more about Places, please check out this guide from Kisi: Places.
Step 5: Select your Visitors options
Select your visitor type and group.
You can add more visitor types as needed based on the sign-in flows you have created in Envoy. Learn more about sign-in flows here.
Visitor flows that do not have a Kisi group mappings will not receive Kisi credentials.
The "Customization" step allows you to finalize the integration and define basic behavior, this includes the following:
Invite Only: Toggling this option on will restrict Kisi permission creation to only visitors with an invite, at time of invite. When this option is toggled off both impromptu visitors and invited visitors receive Kisi access, based on their Visitor Flow in Envoy.
Access Duration: This is the length of time the Kisi permission will work for. After the access duration expires the Kisi permission will be terminated.
Early Access: This option is intended for invited visitors who may need time prior to the scheduled meeting to navigate to the meeting room. This can extend to areas where visitors may need access to enter a larger building or parking garage.
Blocklist Matches: Visitors matching Blocklist entries will not be granted credentials unless their visit is approved by an admin.
Sign Out: Toggling this option will allow Kisi permission to immediately expire upon visitor sign out in Envoy, regardless of the duration defined in "Access Duration". When this option is toggled off access will only automatically expire at the end of the duration defined in "Access Duration".
App Access: Toggling this option on will grant "app access" to Kisi members created by Envoy.
Envoy Guest Indicator: Toggling this option on will add the text "Envoy Guest" to visitors created by the Kisi / Envoy integration.
SMS Sign-in: Toggle this option to share group links via SMS after Sign-In.
Step 6: Select your Employee options
If you already have Kisi setup in Envoy, you can edit your existing settings under the Employees tab under your Kisi Configuration. After enabled, go ahead and re-save the app set-up.
Options for Employee sign-in
Complete the following Options:
Envoy Workplace: Check this box if your company has Envoy Workplace (Employees) enabled.
Employee Exclusions: Select any employees that should be excluded from Workplace.
Share Event Data with Envoy: Check this box if you want badge data to be shared with Envoy.
Badge Event - Target Place: Select the Place to use for badge events on this Envoy location.
Badge Event - Target Access Point: Select the Access Point to use for badge events on this Envoy location.
Access Management: Choose one of the following options based on your employee sign-in (see image above):
Restricted Workspace Access
Register & Sign-in Employee with Badge Event Data
Click Complete Setup.
How Envoy Visitors entries look in Kisi
In the example below, individual visitors are listed per group in Kisi. This list can be found in Kisi under the Home > Your Place > Groups menu.
How Kisi notifications look in your e-mail
Frequently Asked Questions:
Q: There used to be an unlock button through a link at the bottom of the visitor credential email. Now it's not there anymore. What can I do to get it enabled?
A: Kisi has recently changed the way that link access settings function through the API due to security reasons so they've removed the individual link sharing ability at this time. The Envoy team is working on re-introducing the functionality as soon as possible.
Ready to sign up?
Get started in minutes. No credit card required. See plans and pricing →