SANGAM · Identity to Access 01 / 06

Integration Platform

One application combining every system into one easy to understand way to organize, deliver, parse and report.

Sangam — a confluence, where two rivers meet — sits between the systems that know who someone is and the platform that grants access in real time, without human intervention. reads two-way acknowledge

SANGAM · Product Agnostic 02 / 06

How it connects

Product agnostic. On purpose.

There is no adapter to wait for. If a system speaks one of four languages, Sangam can read it, write to it, or both — which is why your organization can grow and change systems without worrying about compatibility.

API

REST, SOAP, GraphQL, or a vendor's proprietary SDK — including the specific write paths that actually reach a door controller.

Workday RAAS → identity feed
Lenel OpenAccess → cardholder write
Security Expert SOAP → EDS download
Genetec / Brivo / Verkada REST
Vendor SDK where no REST exists
Paged reads with retry and back-off
Only changed fields are written
Vendor rate limits respected

Workday RAAS · OpenAccess · SOAP

CSV

Scheduled flat files over SFTP or a watched folder. Delimited or fixed-width, however the source produces them.

Nightly SFTP drop from an SIS
Fixed-width extract off a mainframe
Watched folder on a file share
Any delimiter, any encoding
Checksum + row-count validation
PGP-encrypted files supported
Full or delta extracts
A late or missing file raises an alert

SFTP drop · watched folder

ODBC

Read straight from the database, a reporting view, or a stored procedure when there is no API to call.

Read-only view on the vendor DB
A stored procedure the DBA owns
Direct SQL where no API is published
Least-privilege service account
Change tracking on the source table
No writes to the source, ever
Runs against a replica if you prefer
Query timeout and row caps enforced

SQL Server · Oracle · Postgres

Active Directory

Any v3 directory as a source of identity, group membership, or the one attribute that decides someone's role.

Group membership → access level
Entra ID as joiner / leaver trigger
Attribute-driven role assignment
Nested groups resolved
Bind over LDAPS only
Referrals and paging handled
Service account needs read only
Deprovision follows account disable

LDAP v3 · Entra ID

01

Organize

Pull every source on its own schedule and normalize it into one identity record.

02

Parse

Map each source's fields into the exact shape the access platform expects.

03

Dedupe

One person, one record — matched on a key you choose, never guessed.

04

Deliver

Write only what changed, through the path that actually reaches the controllers.

05

Acknowledge

Confirm the write landed, record the decision, and correct drift on the next pass.

Every pass is idempotent: Sangam reads the current record first and skips the write when it already matches — so re-running costs nothing, increasing speed and reducing field controller congestion. Many access control platforms operate more efficiently with reduced memory and processor overhead. 04 CONNECTORS · 05 STAGES

SANGAM · Systems of Record 03 / 06

Read from

The world’s most popular identity platforms.

HR & Workforce

Workday Oracle PeopleSoft Infor Lawson SAP SuccessFactors UKG Pro Kronos Workforce ADP Workforce Now Dayforce Oracle HCM Cloud Paycom Paylocity BambooHR

Identity & Directory

Microsoft Entra ID Active Directory Okta Ping Identity SailPoint Saviynt OneLogin Google Workspace CyberArk JumpCloud Duo Oracle IAM

Student & Academic

Ellucian Banner Ellucian Colleague Workday Student PeopleSoft Campus Anthology Jenzabar PowerSchool Instructure Canvas Blackboard Learn Slate Moodle Unit4

Housing, Space & Scheduling

StarRez Adirondack THD Symplicity Residence RoomSync eRezLife CollegeNET 25Live Ad Astra EMS Software Accruent Archibus FM:Systems Robin

Campus Card & Credential

CBORD CS Gold CBORD Odyssey CBORD GET Transact Campus Transact eAccounts Blackboard Transact Atrium TouchNet Heartland OneCard Sequoia Retail ITC Systems

Clinical & Vendor Credentialing

Epic Oracle Health MEDITECH symplr GHX Vendormate SEC3URE Reptrax Avetta ISNetworld Veriforce Cority Intelex Modio Health CredentialStream

Parking & Mobility

T2 Systems Flowbird ParkMobile Passport AIMS NuPark Genetec AutoVu Amano McGann SKIDATA TIBA HUB Parking FlashParking Metropolis

Visitor & Request Workflow

Envoy Sign In Enterprise iLobby Proxyclick Veristream Sine HID SAFE Visitor Eptura Knight Watch BAR ServiceNow Jira Service Mgmt ConnectWise

Not a compatibility list to check against — a map of what we meet in the field. Anything reachable by API, CSV, ODBC or LDAP can be a source, including systems that are not on this board. Running in production today

SANGAM · Access Control 04 / 06

Write to

Where access gets enforced.

Enterprise PACS

Security Expert ICT Protege GX ICT Protege WX Access Expert EcoStruxure Lenel OnGuard LenelS2 NetBox C•CURE 9000 Genetec Synergis AMAG Symmetry Honeywell Pro-Watch Gallagher Nedap AEOS Identiv Velocity

Legacy & Migration

Andover Continuum TAC I/NET Continuum CyberStation Andover Infinity Andover AC-256 Casi-Rusco Picture Perfect Facility Commander Cardkey Honeywell WIN-PAK C•CURE 800 PCSC LiNC

Mid-Market & Open

Open Options RS2 Access It! Kantech EntraPass Bosch AMS Siemens SiPass Vanderbilt ACT Paxton Net2 Napco Continental Galaxy Control Keri Systems TDSi Sielox Maxxess eFusion

Cloud-Native Access

Avigilon Alta Brivo Verkada Genea Feenics Acre Security Openpath Kisi ProdataKey SmartRent ButterflyMX Latch Swiftlane Doordeck

Locks & Wireless

SALTO Space SALTO KS ASSA ABLOY Aperio ASSA ABLOY IN120 Allegion ENGAGE Schlage Control Sargent Profile Corbin Russwin dormakaba Yale Accentra Onity Medeco

Credentials & Biometrics

HID Global HID Mobile Access IDEMIA Suprema WaveLynx Farpointe Alcatraz AI rf IDEAS STid Elatec Invixium Princeton Identity HID Signo Identiv uTrust

Elevator, Turnstile & Barrier

Otis Compass Schindler PORT KONE Access TK Elevator Mitsubishi Electric Boon Edam Alvarado Gunnebo Automatic Systems Fastlane Smarter Security Magnetic Autocontrol

Video, Intrusion & Intercom

Milestone XProtect Genetec Security Center Avigilon Unity Motorola Solutions Verkada Command Hanwha Vision Axis Communications Bosch Video Eagle Eye Aiphone Commend DMP

Running in production today

SANGAM · Reporting 05 / 06

What you get back

Report on anything. Report on everything.

Build the view your auditor asks for, filter it to the site or the team that needs it, and have it arrive on a schedule — in the place those people already work.

Customizable

Choose the columns, the grouping and the format. Build the report your auditor asks for, not the one the vendor shipped.

Any field from any connected system
Saved views per team or per site
CSV, XLSX or PDF output
Your own branding on the output

BUILT, NOT CHOSEN FROM A LIST

Filterable

Narrow to the slice that matters — one site, one department, one door group, one date range, or only the exceptions.

Filter by site, role, door group or date
Exceptions-only views for drift
Save a filter as a view others can run
Same filters drive the scheduled send

THE WHOLE ESTATE, OR ONE DOOR

Fully auditable

Every synchronization decision is recorded — what changed, for whom, when and why — so “who has access to what, and how they got it” has an answer.

Granted and refused alike
Card numbers masked to the last four
Source system named on every row
Immutable, timestamped, attributed

AN ANSWER YOU CAN HAND AN AUDITOR

Automated

Set the schedule once and the report arrives without anyone remembering to run it — or fires only when something needs a person.

Daily, weekly or monthly
Exception-only alerts on drift
Re-run any past report unchanged
No one has to log in to get it

SCHEDULED, OR TRIGGERED

01

Email

The report, or a link to it, to a person or a distribution list.

02

SMS / Text

Short exception alerts to a phone, for what cannot wait for a mailbox.

03

Mass notification

Into the platform you already use to reach everyone at once.

04

AWS CloudWatch

Metrics and alarms beside the rest of your AWS estate.

05

Azure Monitor

The same, for operations that already live in Azure.

Card numbers are masked to the last four digits in every audit record, so the trail proves what happened without becoming a credential list of its own. Delivery targets are configured per deployment — tell us which of these you run and we will confirm what is in place before you buy. 05 DELIVERY TARGETS

SANGAM · Support & Deployment 06 / 06

Behind it

World-class support. 24/7/365.^*

24 / 7 / 365^*

Fully supported

The same people who install and service access control systems for enterprise health systems, universities and global manufacturers support the integration that sits on top of them. One number to call — not a hand-off between a software vendor and an installer.

One number to call, not a ticket queue
Answered by the engineers who installed the system
Sync Health dashboard + anonymous health API
Adapter upkeep when a vendor moves their API

* Requires an active Software Support Agreement (SSA).
The SSA covers 24/7/365 response, version upgrades, adapter maintenance and configuration changes as your organization does.

Deployment

Works on-premises or cloud hosted. Runs on infrastructure you control, with your own SQL database. Identity data stays inside your perimeter.

Rollout

Shadow mode first. Every loop reads for real and records what it would write, with zero changes to your access platform — so you approve the behavior before a single door changes.

Speed

Near real time. A change in the source system reaches the door in seconds, on a dedicated change feed that is never blocked by the slower bulk sync.

Lifecycle

Hire to termination. Joins, transfers, leaves, contractor expiry and credential expiration handled automatically — including the non-employee population that normally slips through.

Who it is for

From small simple organizations to large global manufacturers and enterprises, Sangam removes the chaos and improves workflows with reliability, giving you peace of mind.

docs.knightwatch.net SANGAM · CONFLUENCE