SailPoint + Lenel S2 OnGuard: Extending identity security to physical access

[AmyL]

SailPoint Identity Security Cloud (ISC) and IdentityIQ (IIQ) deliver robust governance for digital applications and infrastructure. However, as organizations strengthen their cybersecurity posture, many struggle with an increasing gap: Extending the same level of governance and control to physical access systems.

LenelS2 OnGuard is an enterprise-class physical access control system (PACS) that unifies access control, video surveillance, badge management, and intrusion detection into one centralized platform.

The system has the power to serve thousands of users across enterprise, government, and commercial facilities: Its sweet spot is about scalability and large-scale, multi-site deployments that help organizations manage up to 10,000 doors and 400,000 cardholders in a single environment.

Lenel S2 OnGuard integration: Manage physical access from SailPoint

Establishing connectivity between SailPoint’s identity security platforms and PIAM systems like Lenel OnGuard is a challenge for IT and security teams:

• No centralized governance across digital and physical assets
• Manual, disconnected badge provisioning processes
• Delayed updates to physical access when identity attributes change
• Outdated or lingering badge access contributes to compliance risks

As organizations move to a more unified identity security approach, they want a single platform that governs access holistically across both digital and physical environments. That’s where SailPoint can help.

We’ve developed a certified integration for LenelS2 OnGuard to give enterprises unified identity governance across both digital and physical access. This integration extends SailPoint’s identity security capabilities to physical access systems, allowing organizations to:

• Manage physical access and badge permissions directly from SailPoint
• Automate access assignments based on lifecycle events. (joiner/mover/leaver).
• Govern both digital and physical access through a single platform — ISC or IIQ.
• Apply existing identity compliance and certification workflows to physical access.

Key features of this integration include:

• Unified cardholder management: Centralized provisioning for employees, contractors, and visitors — including badge issuance, badge type assignment, and access level assignment.
• Dynamic access provisioning: Automatically add, modify, remove, enable, or disable access levels based on roles or lifecycle events to reduce manual work and ensure policy alignment.
• Integrated Access Certifications: Badge assignments can be included in SailPoint access reviews, ensuring physical access undergoes the same scrutiny and governance as digital access.
• Role-Based Access Control (RBAC): Access levels aligned to roles provide scalable, consistent badge governance across the organization.

Learn more…

This integration is available to all Identity Security Cloud and IdentityIQ customers. Want to know more? Please refer to SailPoint documentation for full setup and configuration details.