How does this integration work?
This solution allows visitors to automatically receive credentials during sign-in and expire Net2 by Paxton credentials during sign-out using the Net2 API. For customers utilizing Envoy Workplace, this integration also offers support to check employees in automatically.
PREREQUISITES
Operator permissions are required to authorize this integration.
This integration only supports Net2 version 6.05.10330.5472 or greater.
The following IPs must be whitelisted for inbound and outbound communication:
18.204.164.109
52.6.210.64
52.86.90.108
Validate the port configured within Net2 and confirm the port is whitelisted alongside the IPs above
Paxton10 does not support any API integrations, this was advised by the Paxton team. Therefore Envoy's integration only functions with Net2.
Enabling the Envoy + Net2 integration
Depending on your network security, it may be necessary to allow-list Envoy production IPs for access into your Net2 instance before proceeding. The Envoy production IPs are listed in the prerequisites above.
Step 1: Info
Net2 by Paxton Plugin: Navigate to Integrations > All Integrations.
Search for Net2 by Paxton > Click the tile > Click Install.
Allowlist instance: To facilitate this connection, it is necessary to provide credentials and remote connectivity to your Net2 instance to be accessed over the internet. If your network enforces IP blocking or "whitelisting," it will be necessary to enable the following Envoy production IPs:
18.204.164.109
52.6.210.64
52.86.90.108
Click Next Step to proceed.
Step 2: API Access
Enter your Net2 credentials.
Remote URL: The internet accessible URL of your Paxton instance.
Note: Operator permissions required
Client ID can be found within your license file
Username: The username that Envoy will use to authenticate into your Paxton instance.
Password: The password Envoy will use to authenticate into your Paxton instance.
Download the License file via the link provided. Paxton requires Envoy to provide you with a license file. You need to place this downloaded license file in a folder named APILicences.
Click Next Step to save and proceed.
Step 3: Workplace
Click Skip to proceed to Visitor set up.
Select which method of access you would like to use for your employees.
Auto check-in with badge swipe
Recommended for passive capacity and attendance tracking
To use Workplace auto check-in:
Health check/Registration questions must be disabled. To disable questions, go here, click advanced settings under the Employee reservation flow, and disable the questionnaire.
Auto-sign out must be enabled in Location Settings. If auto-sign out is disabled, then employees will remain signed in to the workplace and will not be signed-in the next day with their badge swipes.
Employees must be enabled in Net2. This method does not disable or enable access in Net 2. It signs employees into Envoy when they swipe their badge.
To enable:
Select Auto check-in with badge swipe.
Select the Event type to use for employee check-in.
Select which Door Groups you want to monitor for employee badge events.
Click Next step to save and proceed.
Auto Check-in and Desk Reservation
A badge swipe signs a user into Envoy, whether or not they are scheduled for the day, as long as their badge is active.
If there is an existing desk reservation, the employee is checked into their desk. If there are multiple desk reservations, the employee is checked into the first desk reservation of the day.
If the account is set to automatically assign desks with employee registration (Desks > Settings), Envoy will automatically create a desk reservation and check the employee into that desk.
If this setting is turned off, Envoy will sign the employee into the workplace, but they will not have a desk assigned.
Check-in required for access
Recommended for workplaces with strict entry requirements
To use restricted access:
Net2 users are not disabled by default. If using Check-in required for access and toggle user status, Net2 users (employees) must start in a disabled state. You will need to disable the employee's accounts in Net2 in order for the integration to start granting and disabling access with check-in.
To enable:
Select Check-in required for access
Use the dropdown to select which Restricted Access Method you'd like to use.
Define the length of time you want to grant employees under Employee Access Duration.
Optional: Exclude employees from Envoy functionality. This means that defined employees will not be affected by these integration settings.
Click Next Step to save and proceed to the next step.
Step 4: Visitors
Simplify access for your visitors by automatically provisioning credentials to recorded visitors. If your Net2 system has a QR Scanner, QR codes can be emailed to visitors to be used as credentials. Learn more: QR Code Readers Compatible with Access Control Panels
Select the Visitor types to be provisioned access within your system, then select the corresponding Net2 Access Level.
The drop-down menu on this step is automatically populated based on the visitor flows at this location and the access levels pre-configured in Net2. If you do not see your intended groups, you must revisit your permissions within Net2.
The drop-down menu allows multiple groups per visitor type and an additional visitor to group mappings with the Add Another button.
Invite Required (Optional): Visitors will not be provided access to Net2 during sign-in if this option is enabled and they do not have a previous invite.
Early Access: This option allows you to specify a duration of access prior to the scheduled visitor arrival for the visitor to access the facility (e.g., parking, navigating to a meeting room, etc)
Access Duration: This option allows you to specify the duration of access for visitors.
Enable QR Codes: Visitors will be issued a QR code credential via Envoy to use with Net2.
Card Number Minimum: The 8-digit minimum number your visitor's card can be.
Card Number Maximum: The 8-digit maximum number your visitor's card can be.
Select which custom field you want the Host name to fall into. You can leave this blank if you do not want the host name sent to Net2.
Grace Period: This is the amount of time a visitor will have access after they are signed out of Envoy. You can leave this blank if you do not want your visitors to have access after signing out.
Click Complete setup to finish installation.