Empower your employees and visitors with automated access control and employee check-in through Kisi

Updated over a week ago

This integration can be used to restrict access to certain areas for visitors and automatically check in employees.

How does Kisi work with Envoy?

The Kisi app works with Envoy to streamline access control for employees and visitors. With customization options, you're in control to decide not only which visitor flows receive access but also the level of access they are granted.

Envoy will generate temporary permission shares in Kisi for your enabled employees and visitors based on your criteria with automatic expiration, enforced by permission expiration in Kisi and customization in Envoy. Kisi access is emailed by Kisi to permitted visitor flows based on the email they provide during sign in.


  • Automatically assign visitors to access groups in Kisi.

  • Customize your visitors access by mapping multiple groups to different visitor types in Envoy.

  • Automatically expire visitors access after a pre-set duration or during sign out.

  • Restrict Kisi access to only invited visitors.

  • Automatically provide employees with building access after they’ve been approved through Workplace.


You will need administrative or group manage access in Kisi to complete setup. Ensure you have sufficient access or work with a local administrator before proceeding with the following steps.

Kisi + Envoy Setup

Step 1: Create an administrative or group manage access account in Kisi.

To learn more, check out this guide from Kisi: Create an account and sign in to Kisi.

Step 2: Create a group in Kisi

To learn more check out this guide from Kisi: Create a group.

Step 3: Copy your API key from your Kisi account

  1. Copy the API key from your Kisi Admin panel or under your Name (top right) > My Account > API Key.

  2. If you do not see a secret key, look for a link titled "Show API Secret Key" below the Kisi admin username.

Step 4: Install the Kisi app in Envoy

  1. Navigate to Apps > Access Control in the Envoy dashboard.

  2. Search for Kisi under Access Control.

  3. Click Install under Kisi.

  4. Authorize the permissions between Kisi and Envoy.

  5. Input the API key copied from your Kisi account.

  6. Select the Places (and their related groups from Kisi) where you would like to enable Envoy visitors.

    1. Note: Places in Kisi represent a physical space (i.e. an office or a building) within an organization that uses Kisi. To learn more about Places, please check out this guide from Kisi: Places.

Step 5: Select your Visitors options

  1. Select your visitor type and group.

    1. You can add more visitor types as needed based on the sign-in flows you have created in Envoy. Learn more about sign-in flows here.

    2. Visitor flows that do not have a Kisi group mappings will not receive Kisi credentials.

  2. The "Customization" step allows you to finalize the integration and define basic behavior, this includes the following:

    1. Invite Only: Toggling this option on will restrict Kisi permission creation to only visitors with an invite, at time of invite. When this option is toggled off both impromptu visitors and invited visitors receive Kisi access, based on their Visitor Flow in Envoy.

    2. Access Duration: This is the length of time the Kisi permission will work for. After the access duration expires the Kisi permission will be terminated.

    3. Early Access: This option is intended for invited visitors who may need time prior to the scheduled meeting to navigate to the meeting room. This can extend to areas where visitors may need access to enter a larger building or parking garage.

    4. Blocklist Matches: Visitors matching Blocklist entries will not be granted credentials unless their visit is approved by an admin.

    5. Sign Out: Toggling this option will allow Kisi permission to immediately expire upon visitor sign out in Envoy, regardless of the duration defined in "Access Duration". When this option is toggled off access will only automatically expire at the end of the duration defined in "Access Duration".

    6. App Access: Toggling this option on will grant "app access" to Kisi members created by Envoy.

    7. Envoy Guest Indicator: Toggling this option on will add the text "Envoy Guest" to visitors created by the Kisi / Envoy integration.

    8. SMS Sign-in: Toggle this option to share group links via SMS after Sign-In.

Step 6: Select your Employee options

If you already have Kisi setup in Envoy, you can edit your existing settings under the Employees tab under your Kisi Configuration. After enabled, go ahead and re-save the app set-up.

Options for Employee sign-in

Complete the following Options:

  1. Envoy Workplace: Check this box if your company has Envoy Workplace (Employees) enabled.

  2. Employee Exclusions: Select any employees that should be excluded from Workplace.

  3. Share Event Data with Envoy: Check this box if you want badge data to be shared with Envoy.

  4. Badge Event - Target Place: Select the Place to use for badge events on this Envoy location.

  5. Badge Event - Target Access Point: Select the Access Point to use for badge events on this Envoy location.

  6. Access Management: Choose one of the following options based on your employee sign-in (see image above):

    1. Restricted Workspace Access

    2. Register & Sign-in Employee with Badge Event Data

  7. Click Complete Setup.

Requirements for Auto check-in with badge swipe

1. Health check/Registration questions must be disabled. To disable questions, go here, click advanced settings under the Employee reservation flow, and disable the questionnaire.

2. Auto-sign out must be enabled in Location Settings. If auto-sign out is disabled, then employees will remain signed in to the workplace and will not be signed in the next day with their badge swipes.

Disclaimer for Registration & Check-in for access:

Kisi users must start in a suspended state in order for Envoy to grant them access as they check-in. Kisi users (employees) are not suspended by default. Envoy did not want to take on the liability to mass suspend user accounts. In order to do this on your own, you will need to set Suspend Access to true in order to disable your users' access.

How Envoy Visitors entries look in Kisi

In the example below, individual visitors are listed per group in Kisi. This list can be found in Kisi under the Home > Your Place > Groups menu.

How Kisi notifications look in your e-mail

Frequently Asked Questions:

Q: There used to be an unlock button through a link at the bottom of the visitor credential email. Now it's not there anymore. What can I do to get it enabled?

A: Kisi has recently changed the way that link access settings function through the API due to security reasons so they've removed the individual link sharing ability at this time. The Envoy team is working on re-introducing the functionality as soon as possible.

Ready to sign up?

Get started in minutes. No credit card required. See plans and pricing →

Did this answer your question?