Create your first mobile key credential to start controlling an access control system with Seam.
In this quick start, create an ACS user for a virtual Salto KS access control system. Then, grant the user access to an entrance using a mobile key credential. With mobile keys, developers can create mobile apps that download users' credentials and then use Bluetooth low energy (BLE) or similar communications technologies to unlock granted nearby entrances. For more information about Seam's mobile access solution, see Mobile Access.
This quick start walks you through the process that applies specifically to the Salto KS ACS. There are often differences between access control systems. Once you've completed this quick start, learn how to work with your ACS using Seam, by reading the system integration guide for your ACS.
Overview
This quick start walks you through the following basic steps:
Access groups are preconfigured to grant access to specific entrances.
While some access control systems use access groups, others specify allowed entrances directly within the credential. For more details, see Access Permission Assignment Variations.
View the following information about your successfully-created credential:
The access schedule for the ACS user.
The list of entrances to which the ACS user now has access.
Step 1: Connect a Virtual ACS
In this quick start, use Seam Console to connect a virtual ACS to your sandbox workspace. Alternately, you can use the Seam API to create a Connect Webview and then use it to connect an ACS to Seam.
To create mobile keys for mobile app users, you must use a credential manager. When you added the virtual Salto KS ACS to your sandbox workspace earlier in this quick start, Seam automatically added a compatible virtual credential manager. Identify the ID of this credential manager.
In the top navigation pane of Seam Console, click ACS Systems.
On the Access Systems page, locate the Salto KS Credential Manager.
In the acs_system_id column for the Salto KS Credential Manager, click the ID to copy it.
Store this credential manager ID for future use.
Step 5: Set up an Enrollment Automation for the User Identity
Once you've identified the the credential manager to use for mobile app users, launch an enrollment automation to initialize the phones for an app user, that is, a user identity. This enrollment automation oversees the registration of each new phone for the user identity with the credential manager.
Code:
seam.user_identities.enrollment_automations.launch(
user_identity_id = jen_doe_user.user_identity_id,
create_credential_manager_user = True,
# Use the credential manager ID that you copied earlier from Seam Console.
credential_manager_acs_system_id = credential_manager_acs_system_id
)
await seam.userIdentities.enrollmentAutomations.launch({
user_identity_id: jenDoeUser.user_identity_id,
create_credential_manager_user: true,
// Use the credential manager ID that you copied earlier from Seam Console.
credential_manager_acs_system_id: credentialManagerAcsSystemId
});
seam.user_identities.enrollment_automations.launch(
user_identity_id: jen_doe_user.user_identity_id,
create_credential_manager_user: true,
# Use the credential manager ID that you copied earlier from Seam Console.
credential_manager_acs_system_id: credential_manager_acs_system_id
)
$seam->user_identities->enrollment_automations->launch(
user_identity_id: $jen_doe_user->user_identity_id,
create_credential_manager_user: true,
// Use the credential manager ID that you copied earlier from Seam Console.
credential_manager_acs_system_id: $credential_manager_acs_system_id
);
client.UserIdentities.EnrollmentAutomations.Launch(
context.Background(), &useridentities.EnrollmentAutomationsLaunchRequest{
UserIdentityId: jenDoeUser.UserIdentityId,
CreateCredentialManagerUser: api.Bool(true),
// Use the credential manager ID that you copied earlier from Seam Console.
CredentialManagerAcsSystemId: credentialManagerAcsSystemId,
},
)
return nil
Create an ACS user within the virtual Salto KS access control system, associate this ACS user with the user identity that you created, and specify an access schedule for the user.
Find the ACS system ID.
In the top navigation pane of Seam Console, click ACS Systems.
On the Access Systems page, locate the Salto KS Main Site ACS.
In the acs_system_id column for the Main Site ACS, click the ID to copy it.
Store this ACS system ID for future use.
Create the ACS user, as follows:
Code:
acs_user = seam.acs.users.create(
full_name = "Jen Doe",
email_address = "jen.doe@example.com",
# Use the ACS system ID that you copied earlier from Seam Console.
acs_system_id = acs_system_id,
user_identity_id = jen_doe_user.user_identity_id,
access_schedule = {
"starts_at": "2025-02-10T15:00:00.000Z",
"ends_at": "2025-02-12T11:00:00.000Z"
}
)
const acsUser = await seam.acs.users.create({
full_name: "Jen Doe",
email_address: "jen.doe@example.com",
// Use the ACS system ID that you copied earlier from Seam Console.
acs_system_id: acsSystemId,
user_identity_id: jenDoeUser.user_identity_id,
access_schedule: {
"starts_at": "2025-02-10T15:00:00.000Z",
"ends_at": "2025-02-12T11:00:00.000Z"
}
});
acs_user = seam.acs.users.create(
full_name: "Jen Doe",
email_address: "jen.doe@example.com",
# Use the ACS system ID that you copied earlier from Seam Console.
acs_system_id: acs_system_id,
user_identity_id = jen_doe_user.user_identity_id,
access_schedule: {
"starts_at": "2025-02-10T15:00:00.000Z",
"ends_at": "2025-02-12T11:00:00.000Z"
}
)
$acs_user = $seam->acs->users->create(
full_name: "Jen Doe",
email_address: "jen.doe@example.com",
// Use the ACS system ID that you copied earlier from Seam Console.
acs_system_id: $acs_system_id,
user_identity_id: $jen_doe_user->user_identity_id,
access_schedule: array(
"starts_at" => "2025-02-10T15:00:00.000Z",
"ends_at" => "2025-02-12T11:00:00.000Z"
)
);
Add the ACS user to an access group. For Salto KS, access groups specify the entrances to which users have access.
Some other access control systems do not use access groups and, instead, specify allowed entrances directly within the credential. For more details, see Access Permission Assignment Variations.
Find the access group ID.
In the top navigation pane of Seam Console, click ACS Systems.
On the Access Systems page, click the Salto KS Main Site ACS.
On the Main Site page, click the Access Groups tab.
Locate the Main Group, click ..., and click Copy Id.
Store this access group ID for future use.
Assign the ACS user to the Main Group, as follows:
Code:
seam.acs.users.add_to_access_group(
acs_user_id = acs_user.acs_user_id,
# Use the access group ID that you copied earlier from Seam Console.
acs_access_group_id = access_group_id
)
Output:
None
Code:
# Use the access group ID that you copied earlier from Seam Console.
curl -X 'POST' \
'https://connect.getseam.com/acs/users/add_to_access_group' \
-H "Authorization: Bearer ${SEAM_API_KEY}" \
-H 'Content-Type: application/json' \
-d "{
\"acs_user_id\": \"$(jq -r '.acs_user.acs_user_id' <<< ${acs_user})\",
\"acs_access_group_id\": \"${access_group_id}\"
}"
Output:
{
"ok": true
}
Code:
await seam.acs.users.addToAccessGroup({
acs_user_id: acsUser.acs_user_id,
// Use the access group ID that you copied earlier from Seam Console.
acs_access_group_id: accessGroupId
});
Output:
void
Code:
seam.acs.users.add_to_access_group(
acs_user_id: acs_user.acs_user_id,
# Use the access group ID that you copied earlier from Seam Console.
acs_access_group_id: access_group_id
)
Output:
nil
Code:
$seam->acs->users->add_to_access_group(
acs_user_id: $acs_user->acs_user_id,
// Use the access group ID that you copied earlier from Seam Console.
acs_access_group_id: $access_group_id
);
Output:
void
Code:
// Coming soon!
Output:
// Coming soon!
Code:
// Coming soon!
Output:
// Coming soon!
Code:
_, err := client.Acs.Users.AddToAccessGroup(
context.Background(), &acs.UsersAddToAccessGroupRequest{
AcsUserId: acsUser.AcsUserId,
// Use the access group ID that you copied earlier from Seam Console.
AcsAccessGroupId: accessGroupId,
},
)
if err != nil {
return err
}
You can use Seam Console, the Seam API, or the Seam CLI to view the following information about your successfully-created mobile key:
The access schedule for the ACS user.
The list of entrances to which the ACS user now has access.
To use Seam Console to view information about your new PIN code credential:
In the top navigation pane of Seam Console, click ACS Systems.
On the Access Systems page, click the Salto KS Main Site ACS.
In the Users table, click Jen Doe, the ACS user that you created.
In the Credentials tab for the ACS user, note the mobile key credential (multi-phone sync credential) that you created.
In the Properties area for the ACS user, view the user's access schedule.
Note that Seam Console displays times adjusted to your local computer settings. That is, the times that you see in Seam Console are the times that you specified when creating the credential, adjusted to match your computer's time settings.
Click the Access Groups tab for the ACS user.
Click the Main Group access group.
On the Main Group page click the Entrances tab and then view the entrances to which this access group grants the ACS user access.
This quick start shows the server-side portion of the mobile access development process. The other piece of this process is to develop a mobile app that downloads the user's mobile keys and then uses BLE or similar technology to unlock nearby entrances to which the user's credentials grant access. For details, see Integrating into your mobile application.
Next Steps
Now that you've created a mobile key credential, try out the other ACS quick starts.