--- title: Sine Access Control slug: partner.sine.co createdAt: 2026-05-12T07:43:17.000Z --- # Integration Guide # Overview This integration connects our platform with virtually any third-party access control system to automatically provision, activate and revoke visitor access credentials. It supports QR codes printed on visitor badges or sent via SMS, as well as physical cards such as HID proximity cards that you can manage as assets and assign to visitors during check-in. # How It Works Sine connects directly to your access control system, allowing visitor and staff credentials to be provisioned and revoked automatically as check-in and check-out events occur on our platform. # Requirements ## Sine Requirements - **Integration enablement**: Suitable Sine subscription with the Access Control integration enabled (additional fees may apply) ## Sine Access Control Requirements - **REST API support**: Access control system with REST API support - **API License**: API License for remote credential provisioning - **Data adaptor**: A middleware capable of translating our credential payloads into a data format compatible with the underlying access control system - **QR Reader**: Compatible QR access readers (if using QR codes for access). This should be confirmed with us or your Access Control Integration Partner, however something similar to [this](https://www.amazon.com/LBS-Outdoor-Control-Wiegand26-Scanner/dp/B08BRTD547) is suggested. - **Credential pool**: Available credential pool if using physical access cards - **Testing environment**: A sandbox environment or safe testing space - **Network connectivity**: Determine your method to connect Sine with your on-premise Access Control system. - **Direct API access**: Requires network firewall access to the Access Control API from outside your network # Configuration ## Sine Access Control Configuration ### Vendor Configuration ::::WorkflowBlock :::WorkflowBlockItem **Enable API access** — Enable API access or open protocol support (REST API, SOAP, OSDP, or Wiegand) on the access control system. ::: :::WorkflowBlockItem **API credentials** — Create API credentials or configure system access permissions to allow credential provisioning. ::: :::WorkflowBlockItem **Access zones** — Configure access zones and permission groups to define the level of access granted to visitors. ::: :::WorkflowBlockItem **Credential pool** — Ensure a credential pool or credential issuing capability is available on the access control system. ::: :::WorkflowBlockItem **API documentation** — Prepare the relevant API or protocol documentation for use during the Sine integration setup. ::: :::: ## Sine Configuration ### General Setup ::::WorkflowBlock :::WorkflowBlockItem **Admin permissions** — Ensure you have `Team` or `Site Admin` permissions. These permissions are required to configure integrations. ::: :::WorkflowBlockItem **Log in** — Log in to the Sine admin dashboard at [https://dashboard.sine.co](https://dashboard.sine.co). ::: :::WorkflowBlockItem **Select site** — Navigate to the `Locations` tab and click on the site you want to configure the integration for. ::: :::WorkflowBlockItem **Add integration** — In the Site menu, click `Integrations`. Click the `Add integration` button and select `Access Control` from the list of available integrations. If the integration does not appear in the list, contact support. ::: :::WorkflowBlockItem **Name integration** — Enter a name for the integration. You can use any name, but choose something that helps you identify what the integration is for. ::: :::: ### Connect to Access Control ### Connection Method - **Cloud to cloud**: A direct cloud-to-cloud API connection between Sine and the vendor platform requires no on-premise infrastructure. There are two ways to establish network connectivity to your on-premise Access Control instance. Select your preferred method below. ::::::Tabs :::Tab{title="Sine Secure Bridge"} Sine Secure Bridge enables a secure, managed tunnel between Sine Cloud and your on-premise system's API. - **Enable Secure Bridge** — Switch `Use Sine Secure Bridge` on to display a dropdown list of your Secure Bridge tunnels. If the Sine Secure Bridge toggle is not visible, contact your Sine representative. ::: :::::Tab{title="Direct network connection"} This method establishes a direct connection from Sine Cloud to your on-premise system's API. - **Endpoint URLs**: Sine calls the Access Control data adaptor at four separate endpoints, one per operation. Enter all four endpoints. The adaptor's host, port, and routes are set when it is installed, so confirm these details with whoever installed it if you are unsure. ::::WorkflowBlock :::WorkflowBlockItem **Verification endpoint** — Enter the verification endpoint, e.g. `https://your-access-control-server.com/verify`. Sine calls this endpoint to confirm the data adaptor is reachable and the credentials are valid when you test the connection. ::: :::WorkflowBlockItem **Provision endpoint** — Enter the provision endpoint, e.g. `https://your-access-control-server.com/provision`. Sine calls this endpoint to create the visitor's credential in Access Control. ::: :::WorkflowBlockItem **Activation endpoint** — Enter the activation endpoint, e.g. `https://your-access-control-server.com/activate`. Sine calls this endpoint to activate a provisioned credential so it can be used at readers. ::: :::WorkflowBlockItem **Deprovision endpoint** — Enter the deprovision endpoint, e.g. `https://your-access-control-server.com/deprovision`. Sine calls this endpoint to revoke the visitor's credential when they check out, or when their pass expires or is rejected. ::: :::WorkflowBlockItem **Ignore SSL Certificate Check** — Turn this setting ON if you are using a self-signed certificate, as the Access Control integration will not be able to validate the certificate otherwise. If this toggle is not visible, contact your Sine representative. ::: :::: ::::: :::::: ### Authentication ::::WorkflowBlock :::WorkflowBlockItem **API Key** — Enter your Access Control `API Key` and your `External ID`. The `External ID` can be any value. ::: :::WorkflowBlockItem **Test Connection** — Click `Test connection` to confirm that your configuration is correct. Once you have successfully verified that Sine can connect to your Access Control account, the Integration Settings section becomes available. ::: :::: ### Integration Settings ### Credential Configuration This setting controls the type of access control credential generated when the integration runs. Select your preferred credential type below. ::::::Tabs :::::Tab{title="Sine QR Code"} This option generates and attaches a QR code to a visitor's pass. The integration runs when a pass is created or expired, or when the visitor checks out. ::::WorkflowBlock :::WorkflowBlockItem **Provision credentials on invitation** — By default, the visitor's credentials are provisioned at check-in. If you enable this toggle, the QR code provided to the visitor in their invitation email is provisioned in Access Control and activated closer to the date of the visitor's invitation start time. Use this setting to provide a more seamless experience by provisioning car parking access or access to secure areas prior to the visitor's arrival. Note: if you enable this toggle and also want to provision credentials at check-in, you must create a separate integration. ::Image[]{src="https://api.archbee.com/api/optimize/cIIINwBBlIs0Au1Y_bwqP/lknRqPyfPLqAaxlybscZn_provision-on-invitation-toggle.png" size="75" position="flex-start" alt="provision-on-invitation-toggle" sha="08ccb35ca52a000d1f42178a90ae25edc1d030f3" initialPath="/assets/integration-guide/access-control/provision-on-invitation-toggle.png" githubPath="docs/assets/integration-guide/access-control/provision-on-invitation-toggle.png" showCaption="false"} ::: :::WorkflowBlockItem **Send QR Code by SMS** — If the visitor's mobile number is available, send them a QR code credential by SMS. This can serve as a useful backup to a badge printer. ::: :::WorkflowBlockItem **Provision credential on check-in** — Select one or more visitor types for which you want the integration to provision credentials in your access control system when the visitor checks in using Sine. Ensure that the `Host Selection Required` checkbox is ticked for any visitor types used in access control integrations. Without this setting, visitors would receive access credentials without requiring approval from a host. You can review which of your visitor types have `Host Approval Required` enabled in the `General` tab of your site settings. ::: :::WorkflowBlockItem **Grace Period** — A visitor may sometimes check out using Sine before they actually leave the location, and may still need to use their credentials to exit. Set a grace period to ensure their access control credentials are not deprovisioned immediately upon check-out in Sine. ::: :::: ::::: :::Tab{title="Physical Assets"} This option activates a physical asset (e.g., HID card) in your Access Control system. The integration runs when an asset is assigned, returned, or marked as lost. - **Asset type** — Select the asset type applicable to this integration. You can create new asset types on the `Assets` page in the Sine Core Dashboard. ::Image[]{src="https://api.archbee.com/api/optimize/cIIINwBBlIs0Au1Y_bwqP/XcAEiQfIPF0cbUO-ifhhx_asset-types.png" size="75" position="flex-start" alt="asset-types" sha="9948c7af5630a38ed4cabebd9c506f0555d1785d" initialPath="/assets/integration-guide/access-control/asset-types.png" githubPath="docs/assets/integration-guide/access-control/asset-types.png" showCaption="false"} ::: :::::: ### Basic Configuration ::::WorkflowBlock :::WorkflowBlockItem **Connection details** — Enter the connection details specific to your access control system (API endpoint, credentials, IP address, or COM port). ::: :::WorkflowBlockItem **Test connection** — Test the connection and enable auto-provisioning for visitor check-in. ::: :::: ### Messages - **Visitor failure message** — Configure the message displayed to the visitor if the access control integration fails for any reason. ### Notifications - **Send integration failure notifications** — If the integration fails, you can enter one or more email addresses to be notified of the failure and its corresponding details. # Testing ::::WorkflowBlock :::WorkflowBlockItem **Create a test check-in** — Create a test visitor check-in using a visitor type configured for the integration. ::: :::WorkflowBlockItem **Verify credential provisioning** — Verify that the visitor profile is created in the vendor system and that credentials are provisioned correctly. ::: :::WorkflowBlockItem **Test credential access** — Test the credential at a compatible reader to confirm that access is granted. ::: :::WorkflowBlockItem **Verify credential revocation** — Check out the test visitor and verify that access credentials are revoked after the configured grace period. ::: :::WorkflowBlockItem **Check failure notifications** — Monitor the integration failure notifications to ensure they are working correctly. ::: :::: *** *Need help? Contact Sine Support at* **[support@sine.co](mailto\:support@sine.co)**