Traction Guest can integrate with OnGuard to provision temporary access badges directly from within the Traction Guest web application. This knowledge article will walk through the setup process for a Traction Guest admin. To see the provisioning process for an end user, click HERE.
Additionally, this knowledge article will walk through various troubleshooting steps that may come up with the integration.
The administrator of this integration will be able to determine:
Which users will have access to use this integration
What Access Levels the user can provision a badge with
What badges are to be made available to be used with this integration
These badges will only be active for the duration that the visitor is onsite and will be deactivated either manually by a user or automatically when the visitor leaves for the day. Every time the visitor signs in, they will need to have a badge provisioned for them.
Any guests that are to have one badge remain active for multiple visits should have that badge provisioned directly within OnGuard.
Integration Setup and Configuration
OnGuard License
This integration requires your OnGuard license to include the OnGuard Subscription Software Modules, listed on your OnGuard license under OpenAccess Application Support, and the Partner Integration (IPC-052-TNGST01), listed under Partner Integrations.
OnGuard Permissions
Within OnGuard, ensure the following permissions are set for the user whose credentials will be used within Traction Guest:
System Permission Groups
Access Level, View/Access
Cardholder Permission Groups
Cardholder: View/Access, Add, Modify
Visitor: View/Access, Add, Modify
Badge: View/Access, Add, Modify
Access Level Assignments
Modify Access Level Assignments
Badge Types: View/Access
Badge Types
Badge types used with Traction Guest should have badge IDs allocated via Manual Entry.
Access Levels
The OnGuard User whose credentials will be used within Traction Guest will need to have access levels assigned.
Field/Page Permissions
It is recommended to allow the user to view/edit all fields related to Cardholders and Visitors, including email. Full view/edit permission for Badges is also recommended.
Connecting OnGuard server to Traction Guest location
Navigate to the Locations page within your Traction Guest account and choose the relevant location.
Select the “Physical Access” Tab.
Click on “Add Provider”.
4. Select the access control provider and enter server name & URL. If you are setting up this integration on the OnGuard server directly, the URL will likely be https://localhost:8080. Then, click “Next”.
5. Click “Download” to access the Secure Tunnel software.
Note: This is unique to every Traction Guest location.
6. Extract the downloaded zip folder and run the “install.bat” file as an Administrator on the machine where the OnGuard client is running.
7. Once the Install batch file has run, return to the “Edit Physical Access Provider” window in Traction Guest and click "Next".
Note: This will use the newly installed secure tunnel to fetch the “directories” from your OnGuard server.
8. Fill in the provider settings with username and password of an OnGuard admin and select the directory.
Note: Any updates to Access Rules need to be manually synced to Traction Guest. Click the “Refresh Access Rules” button to pull the newest rules from OnGuard.
9. You will need to add the badges you intend to use with this integration in the “Security Badges” window.
10. Add all the badges with a user friendly name, the unique ID of the badge, and the type of badge.
Note: The Badge Unique ID only supports numbers. Any letters or symbols will result in a validation error.
The Badge Friendly name can be whatever you want it to be. This is so you can identify the badges without needing to scan them.
Now the configuration between OnGuard and Traction Guest is complete. Next we will assign user groups access to use the integration.
Assigning user access to provision badges
Click on the Gear icon at the top right corner of your account and select the “Preferences” page.
2. Navigate to the “Users” tab and edit the group of users that you want to assign access to.
3. Select the Access Levels you want these users to be able to provision badges with.
Note: the Access levels will show the Location name first followed by the access level that is fetched from the integrated OnGuard server at that location.
4. Once you click update, the users within that group will now be able to provision badges.
Troubleshooting Instructions
When troubleshooting the OnGuard integration, it will be helpful to use a modern web browser (Chrome, Firefox, etc.) with a “Developer Tools” option, where network requests and responses can be viewed. This information can provide further information on the results of network requests that are being made to our servers. Responses to these requests will contain useful information about issues you may be troubleshooting and can be passed along to Traction Guest support so that we can assist you.
The first troubleshooting step for any OnGuard integration issue should be to test the connection between your account and the OnGuard server.
To do this:
1. Navigate to the location page.
2. Select the “Physical Access” tab.
3. Click on “Modify Provider”.
4. Go to the “Setup Tunnel” step and click on “Test Connection”.
5. Look to the bottom right corner after clicking on this button to see the response.
If that test fails, please consult the next section Cannot continue beyond the “Setup Tunnel” step.
Cannot continue beyond the “Setup Tunnel” step/Cannot fetch OnGuard directories:
Before users are allowed to continue beyond the “Setup Tunnel” step in our setup wizard, we verify that the connection is set up properly by attempting to fetch the directories from the OnGuard server. If this connection is not successful, ensure that the OnGuard server is accessible from the client by visiting the “Server URL” entered in step 1 of the Physical Access Provider from the client machine.
If you cannot connect to the OnGuard server from the machine running the guest_connector service, please refer to OnGuard troubleshooting steps.
If you can confirm that the OnGuard server is available from the machine with the guest_connector service running, perform these troubleshooting steps:
Ensure that the guest_connector service is running by going to the Windows start menu, typing “services” and hitting enter. In the list of services, there should be a service called “ngrok” which is running. If so, click on “restart service” and attempt to confirm the connection within Traction Guest once again.
If this does not work, open the config.yaml file that was included with the guest_connector service and ensure that the “addr” field matches that which is entered in Step 1 of the setup wizard. Update this field in the yaml file to match that in the wizard.
If the tunnel appears to be configured properly but you are still unable to confirm the connection, contact Traction Guest customer success for additional assistance.
Cannot successfully fetch Physical Access Rules & Security Badge Types
If you see the error “Could not fetch Access Providers & Security Badge Types”, there is likely a communication error between Traction Guest and OnGuard. Follow the steps for the Cannot continue beyond the “Setup Tunnel” step/Cannot fetch OnGuard directories issue, and if that is not successful, contact Traction Guest Customer Success for further support.
Cannot see Security Badge Types
If you are unable to see a dropdown list of Security Badge Types when creating Security Badges, they will need to be refreshed manually by clicking on the “refresh” icon associated with the OnGuard instance.
If refreshing Physical Access Rules & Security Badge Types is successful but the expected Security Badge Types are not visible still, ensure that Security Badge Types have been created within OnGuard and that the OnGuard user that was entered during the initial setup of the Physical Access Provider has visibility of the necessary Security Badge Types within OnGuard.
If refreshing the Physical Access Rules & Security Badge Types is not successful, refer to the troubleshooting section Cannot continue beyond the “Setup Tunnel” step/Cannot fetch OnGuard directories for further assistance with this issue.
Cannot assign Physical Access Rules (Access Levels) to a User Group
If no dropdown field for Physical Access Rules is visible inside of the Traction Guest User Group dialog or the expected Physical Access Rules are not visible, they will need to be refreshed manually by clicking on the “refresh” icon associated with the OnGuard instance.
If refreshing Physical Access Rules & Security Badge Types is successful, ensure that Physical Access Rules (Access Levels) have been created within OnGuard and that the OnGuard user that was entered during the initial setup of the Physical Access Provider has visibility of the necessary Security Badge Types within OnGuard.
If refreshing the Physical Access Rules & Security Badge Types is not successful, refer to the troubleshooting section Cannot continue beyond the “Setup Tunnel” step/Cannot fetch OnGuard directories for further assistance with this issue.
Cannot see “Provision Badge” button on the Guestbook page
The visibility for this button is gated behind the following expectations:
The logged in user is a part of a User Group that has been given permission to assign at least 1 Physical Access Rule. To do so, refer to the Assigning user access to provision badges section of the setup documentation.
There are Physical Access Rules that are associated with the location of the signin. Refer to the Initial Setup and Configuration section of this document for assistance in setting up a Physical Access Provider for the signin’s location.
The user has the “Provision Badge” permission for signins in an assigned Permission Bundle within Traction Guest. This can be set in the Permission Bundles page within Traction Guest, and a Permission Bundle can be assigned to an individual Traction Guest user under the Users tab within the Preferences page.
If these conditions have been met, but the Provision Badge button is still not visible for a signin, please contact Customer Success for further assistance.
Cannot provision/de-provision a badge
If you are unable to provision/deprovision a badge, there is likely a discrepancy between OnGuard and Traction Guest records for Security Badges. The following checks can be made to ensure that the data between Traction Guest and OnGuard is up to date:
Ensure Traction Guest has the latest Physical Access Rules and Security Badge Types from OnGuard by visiting the Location page associated with the Signin you are trying to provision a badge for and clicking the “refresh” button for the Physical Access Provider created for OnGuard
Once refreshing Physical Access Rules & Security Badge Types, check (and if necessary, update) the relevant Security Badges to ensure they are associated with current Security Badge Types.
Search for the Badge ID within OnGuard to ensure it is not currently assigned to a cardholder. If it is, remove it and try assigning the badge within Traction Guest again
Search for the Visitor within OnGuard to ensure they are not currently already assigned a badge. If they are, remove it and try assigning the badge within Traction Guest again
Check the Badge Type within OnGuard to ensure that the Badge ID being assigned to the signin falls within the acceptable range of badge IDs for the specified Security Badge Type
If all of these checks have been confirmed, and any of the above issues persist, please contact Customer Success for further assistance: https://success.tractionguest.com/s/support
Failure to provision badges
Check the badge type in OnGuard is not set automatically assign ID. It must be set to “Manual Entry” and then there must be a range of allowed Badge IDs.