Best practices for setting up ClearID with an existing Synergis system - ClearID

This information is intended for end users, integrators, or deployment contacts who are responsible for planning, designing, and configuring a ClearID system.

Pre-ClearID deployment tasks

1. Prepare your cardholder information.
   1. In Security Center, make sure that the existing cardholders have the required information to link with ClearID identities.
      IMPORTANT: Cardholder Email field or External ID custom field must be populated.
      • This check ensures that existing identities and future identities are linked with pre-existing cardholders.
      • Future cardholders created by ClearID will already be linked correctly.
2. Plan your Sites and Areas to suit your access requirements.
   Tip: Refer to your existing Synergis system when planning out your requirements. Think about meaningful names that relate to the sites or areas that end users will request.
   1. Plan out the Sites and Areas that require access control.
      • Example sites: Main building, Satellite office 1, Satellite office 2 and so on.
      • Example areas: 1st floor, 2nd floor, server room, auditorium, and so on.
      NOTE: A site is typically one physical building or a cluster of buildings in close proximity. The site configuration applies to the entire site so it should be controlled by the same sets of policies (access configurations and visitor management configurations).
   2. Plan out the Roles that you require for your access and identity grouping.
   3. (Optional) Consider attribute-based provisioning to automate role memberships.
   NOTE: Make a note of these sites, areas, and roles for use during the deployment tasks (steps 3 and 4) detailed later in this procedure.
3. (Optional) Test your setup and configuration in a ClearID demo environment.
   1. Connect your ClearID demo account to a Synergis demo system.
   2. Contact your Genetec Inc. representative to request a ClearID DEMO account and a Synergis demo system.
      IMPORTANT: The configuration performed in a demo environment cannot be migrated to a production system.

Deployment tasks

1. Connect your existing production Synergis system with your ClearID production account.
   1. Install the ClearID plugin.
   2. Connect Security Center to ClearID.
2. Synchronize identities with your data source.
   Depending on your specific requirements, do one of the following:

   • Synchronize your identities using the API.
   • Synchronize your identities using the Genetec ClearID™ One Identity Synchronization Tool.
3. In the ClearID web portal, create the sites and areas that you planned earlier.
   1. Create your sites.
   2. Create your areas.
4. In the ClearID web portal, create the roles and attribute provisioning policies that you planned earlier.
   1. Create your roles.
   2. (Optional) Create attribute-based provisioning policies to automate role memberships.