Please note that your subscription plan determines the specific set of features available to you, which may result in differences between what you see and the images presented in this article. For further details on the features included in your plan, please contact your OfficeSpace Admin.
Using the
Access Control Integrations available in the Admin module, you can integrate
Safeguard questionnaires filled out by your employees with
Kastle. Remember that you must be a System Admin in OfficeSpace in order to use the Admin module.
Prerequisites and Additional InformationConfiguring the IntegrationUsing the IntegrationDisconnecting Kastle and OfficeSpace Integration
Prerequisites and Additional Information
Building access permissions are reset every morning at 4 am local time, as per Kastle. By default, access is disabled, and so with this integration setup, employees will have to pass the OSS Safeguard attestation in order to gain access. If this integration is not enabled at an employee's home location, or an employee is marked as Attestation Exempt, access will not be disabled.
Integration between OfficeSpace and Kastle requires deployment and configuration of a Physical Logical Access Interoperability (PLAI) agent, and configuration within the MyKastle app. Please speak with your Kastle representative for assistance correctly deploying the PLAI agent and configuring the MyKastle App during the integration enablement process.
Should you need assistance with configuring or troubleshooting Kastle, please contact your Kastle support representative.
Configuring the Integration
Accessing the Kastle Integration SettingsConfiguring the Integration in KastleFinalizing Integration
Accessing the Kastle Integration Settings
Using the Hamburger menu, navigate to
Admin (1), and then select
Connectors (2) to be taken to the Connectors screen.
Under
Access Control Integrations, you'll find the
Connect to Safeguard subsection. Select
Kastle Integration to continue.
If you need to access the Integrations page from another area of Connectors, select
Access Control Integrations at any time from the
Connectors menu on the left-hand side.
Activate
Connection Details via the
toggle.
Integration is now enabled between a correctly-configured Kastle account and OSS. Safeguard results will be sent to the OfficeSpace PLAI Adapter. Your URL, User Name, and Password fields will auto-populate with your information.
It is important to note that this integration does not create a connection with Kastle, or your PLAI agent. You must work with your Kastle representative to input the information from these fields into the PLAI Agent, and to start the connection between the agent and the OfficeSpace PLAI Adapter. You will also need their support to configure the PLAI Agent, and your instance of the MyKastle application.
Configuring the Integration in Kastle
It is recommended that you work with your Kastle representative to make sure your instance of Kastle is correctly configured.
Configuring the PLAI Agent
Configuring MyKastle
Configuring the PLAI Agent
The following configurations need to be in place:
Employees (Credential Holders) must be synced between the PLAI Agent and the OfficeSpace PLAI Adapter, either manually or through automatic synchronization. Note that the sync will only send employees to the Agent that have changed in the LDAP v3 directory connected to the PLAI Agent.
Configuring MyKastle
You must turn the feature on for each of the locations that will be subject to Safeguard screening.
Any employees that are Attestation Exempt must be marked as such in MyKastle.
Finalizing Integration
In the Assigned Sites panel in OfficeSpace, you can now choose which sites will be integrated with Kastle. The Safeguard results associated with the selected sites are the only ones that will trigger Kastle requests. They must match the locations selected in MyKastle for Safeguard screening.
Selecting a site in the dropdown will add it to the Site Name list, and selecting
Save Assignments will store your selections in OfficeSpace.
Note that if no sites are selected here, then no users will be managed based on their Safeguard results.
To assign a site, select the checkbox next to that site in the
site list (1). If you'd like to assign all sites in your organization, use the
Select All toggle (2) above the list. After you've chosen all of the sites you'd like to assign to Safeguard and Kastle, select
Ok (3) to close the pop-up.
Using the Integration
Now that integration has been configured, requests will be sent to Kastle based on Safeguard results.
| User Status | Safeguard Complete? | Pass or Fail? | Outcome |
|---|
| Active, in Group | Yes | Pass | Start and End date fields in OfficeSpace will be updated to new date for this user |
| Inactive, in Group | Yes | Pass | Start and End date fields in OfficeSpace will be updated to new date for this user |
| Inactive, in Group | Yes | Fail | No update to the Start and End date values occurs |
| Active, in Group | Yes | Fail | The End Date is updated to a date in the past (no access granted) |
| Active or Inactive, Not in Group | Yes | Pass or Fail | A "not found' error message will appear in the log file in OfficeSpace. |
Logs
You can find details on the requests being sent by utilizing the search field for Logs, located under the Assigned Sites panel.
The Logs will display the following information:
- New stream connections between the PLAI Agent and OfficeSpace's PLAI Adapter
- Safeguard Attestations received by the OfficeSpace PLAI Adapter
- Received Safeguard Attestations that have been sent to the PLAI AgentError messages, for example, those concerning failed connections between OfficeSpace and the OfficeSpace PLAI
The search field will accept a search for an email address or a timestamp in YYYY-MM-DD-TT:TT format (e.g February 3rd, 2021 at 17:43 UTC would be:
2021-02-03T17:43).
Disconnecting Kastle and OfficeSpace Integration
Note that if you would like to disable the connection from Kisi to OfficeSpace, please speak with your Kastle representative for assistance.
To disconnect the integration, set the toggle on the
Connection Details panel to off. This action will both remove the entry from the list of active OfficeSpace Integrations on the Connectors page, and stop sending Safeguard results from OfficeSpace to Kastle. The image below shows the switch in its disconnected state.
