Go to Envoy
All Collections
Apps
Access control
OnGuard by Lenel•S2

OnGuard by Lenel•S2

Learn more about how Envoy integrates with OnGuard to help simplify your security operations.
Rawee Gobena avatar
Written by Rawee Gobena. Updated over a week ago

OnGuard is a security platform that offers applications relevant to every major industry, tools for integration with any critical business application, and the most extensive device support available anywhere.

How does this app work?

Envoy will send a record of every visitor who signs in on your kiosk to OnGuard to create visitors and badges, and optionally creates and signs in visits. Visits in OnGuard are assigned a cardholder (employee) for each visit record.

You can configure Envoy to apply a certain Badge type for your Envoy visitor types. You can then use all of OnGuard’s features for your visitors, such as badge provisioning, security alerts, and more.

Enabling Envoy + OnGuard

Note: You’ll need to have admin permissions on your OnGuard account to manage visitors to complete this integration. Either become an administrator or ask your administrator for help before completing these steps:

  1. Go to Apps > All Apps.

  2. Search for OnGuard > Click on it > Click Install.

  3. Take note of Envoy’s two static IP’s for whitelisting.

  4. Enter your on-prem IP and port, in the URL field.

  5. Click "Save Configuration"

  6. Enter your OnGuard directory login credentials, choose a directory from the drop-down, and click “Next Step.”

  7. Assign Envoy some or all Visitor types to a predefined Badge Types in OnGuard. This allows certain Envoy visitor types to have pre-defined access to specific doors and or elevators once you assign the visitor a hard badge.

  8. Optionally: assign a default Badge Type for any Envoy visitor type not configured.

  9. Optionally: choose to issue badges to registered guests only.

  10. Optionally: choose to create and sign-in a Visit in OnGuard if the Envoy host email matches a Cardholder within OnGuard.

  11. Optionally: choose to sign-out the Visit record in OnGuard.

  12. Click "Complete Setup" to finish the configuration.

Envoy Protect + OnGuard

If your company has Envoy Protect enabled they can edit their existing setup. Click on Step 4 Envoy Protect and click the checkbox to enable the "Envoy Protect" option, choose an expiration method (automatic expiry on sign-out), then re-save the integration.

Note: If you haven't yet set up OnGuard, follow the steps from Enabling Envoy + OnGuard first.

DISCLAIMER: Cardholder's badges (employees) are not disabled by default, Envoy did not take on the liability to mass disable badge access initially. In order to do this on your own, you will need to set the activation window of all employees' badges to disable your cardholders' access. In cases where an employee has multiple badges, note that all badges belonging to that employee would be enabled.

How does it work?

  1. The employee has answered the preconfigured questions by the Envoy admins.

  2. They pass screening based on the set of rules

    1. (i.e. Have you been in contact with someone feeling ill over the past 14 days?)

  3. The employee will be approved for the next business day

  4. When they go to the office the next day, the employee will need to "check-in" in order for their credentials to reactivate to allow them to enter the building.

Note: Envoy is not touching the Badge Status field within OnGuard to enable access. We set the Activate and Deactivate dates upon the employees sign in and sign out of Envoy.

Envoy + OnGuard use cases

Invites (registration)

Pre-invited guests through Envoy will get registered in OnGuard ahead of time using the arrival date and time. In order to learn more about how to create invites, we have an extensive guide here.

Visitors

Real-time visitors who are not registered will typically be registered through the iPad Kiosk app. These visitors will become registered visits within OnGuard once they complete sign-in through Envoy. Alternatively, an admin can register visitors through our web Dashboard, with an extensive guide here.

How to set up access control via QR codes?

Note: Must input card range within Envoy configuration only

How to configure within OnGuard

  1. Configure OnGuard System Settings

    1. Open the System Administration application for OnGuard.

    2. Navigate to "Administration" -> "Cardholder Options"

    3. In the new panel, navigate to "Badge ID Allocation".

    4. In the "ID Allocation" tab, set the field "Generate Badge ID" to "Manual Entry".

  2. Ensure that any OnGuard badge types used in Envoy use "Use system settings for badge ID Allocation (Automatic)".

    1. Open the System Administration application for OnGuard.

    2. Navigate to "Administration" -> "Badge Types"

    3. In the new panel, select the target badge type. The right-side panel tab "Badge ID Allocation" should be configured so that the option "Use system settings for badge ID allocation (Manual Entry)" is selected.

How to configure within Envoy

  1. On the Visitors step, map your OnGuard badge types configured in the steps above

  2. Input a minimum and maximum card range (card creation happens from the Envoy system.)

  3. Choose "advanced access" for pre-registered guests, and their allotted period that the QR code will work before the scheduled meeting time

  4. Check the 1st box to enable QR codes via email format

  5. Optionally: check the 2nd box to enable QR codes via paper badge

FAQ

OnGuard licenses:

  • OnGuard Software Subscription Modules (SWG-XXX)

OnGuard part numbers:

  • Visitors (badging) & Protect - IPC-021-ENVY01 needs to be purchased through a VAR

Note:

Ready to sign up?

Get started in minutes. No credit card is required. See plans and pricing →

Start Free Trial
Did this answer your question?