Why Converge
Closing the Identity Gap
Automated Offboarding
Badge access is revoked the moment an employee's IT account is disabled.
Role-Based Provisioning
Door and zone permissions assigned automatically based on job role and department.
Single Audit Trail
Physical and logical access events correlated under one identity for investigations.
Real-Time Sync
Changes in the HR or identity system propagate to physical access control without manual re-entry.
Architecture
How the Sync Works
Identity Provider
Okta or Azure AD remains the source of truth for user identity and group membership.
Integration Layer
A connector maps IdP groups to access control roles and zone permissions.
Access Control Platform
Pro-Watch or equivalent enforces the resulting policy at every door and turnstile.
FAQ
Converged Physical-Cyber IAM - FAQ
What is converged physical-cyber IAM?
It is the practice of managing physical access permissions, such as which doors a badge can open, from the same identity source used for IT systems, so a single identity lifecycle event like onboarding, role change, or termination updates both digital and physical access automatically.
Can this integrate with an existing Pro-Watch or HID access control deployment?
Yes. Converged IAM sits as an integration layer between the identity provider and the existing access control platform, mapping IdP roles and groups to door and zone permissions without requiring a change of access control hardware.
Why does this matter for HCIS and NCA compliance?
Both physical security directives and NCA cybersecurity controls place strong emphasis on access management and timely deprovisioning; converged IAM directly supports these requirements by removing the manual, delay-prone step of separately updating badge access when an IT account changes.