Jobsite Access & Safety integration
Avigilon Alta (Openpath) COI compliance integration
Tie badge access in Avigilon Alta, formerly Openpath, to each subcontractor's verified insurance. Pikorua Security maps subcontractor companies to Alta access groups and, when a policy lapses or fails your rules, removes the company's users from the site groups that open your doors and gates; a verified renewal restores exactly the same memberships.
Avigilon Alta (Openpath), Harbor Point Medical Office
Group Ridgeline Roofing / Harbor Point
Site access hold: COI deficient
GL 7741-0093-22 expired 10/15/2026. Membership snapshot saved before removal.
- Entries
- Gate 2, Hoist lobby
- Users in group
- 0 of 14
- Credentials
- 11 mobile, 3 card
- Membership snapshot
- Saved 06:00 AM
- Last change
- Removed by Pikorua Security
Written by Pikorua Security Oct 16, 2026, 06:00 AM ET
- Setup time
- 45 minutes
- Connection
- Alta API (signed JWT) + REST hooks
- Fields synced
- 5 fields, 4 trigger events
- Included on
- Enterprise
Sync fields
What Pikorua Security reads from and writes to Avigilon Alta (Openpath).
| Field | Direction | What happens |
|---|---|---|
| Sites and zones | Avigilon Alta (Openpath) to Pikorua Security | Read so each Pikorua Security project maps to the Alta sites and zones that control its gates and doors. |
| Groups | Avigilon Alta (Openpath) to Pikorua Security | Access groups, typically one per subcontractor per site, matched to Pikorua Security vendors. |
| Users and group membership | Avigilon Alta (Openpath) syncs both ways with Pikorua Security | Pikorua Security reads membership to count affected workers, then removes or restores membership when a verdict changes. |
| Credential types | Avigilon Alta (Openpath) to Pikorua Security | Read only, to report how many mobile and card credentials a hold affects. |
| Entry events | Avigilon Alta (Openpath) to Pikorua Security | Optional: forwarded by an Alta Rules Engine REST hook, so Pikorua Security can show which held companies attempted entry. |
Trigger events
When the certificate changes, Avigilon Alta (Openpath) changes with it.
- Hold
Workers compensation or general liability expires
Then: Pikorua Security removes the company's users from its site access groups, and their mobile and card credentials stop opening that site's entries.
- Hold
Subcontractor fails a rule you set to gate
Then: Same removal, logged with the rule and the number of users affected; the superintendent is notified.
- Warn
Coverage expiring in 15 days
Then: No change in Alta. The superintendent and the subcontractor's foreman are notified.
- Release
Renewal verified
Then: Group memberships restored from Pikorua Security's snapshot, so nobody rebuilds access by hand.
Setup
Live in 45 minutes.
5 steps, done by your Avigilon Alta (Openpath) administrator and a Pikorua Security Admin together. Nothing to install on your servers.
Alta API (signed JWT) + REST hooks- 1
Create a service identity
An Alta super admin creates a user for Pikorua Security with permission only to read sites, zones, groups and users and to change group membership.
- 2
Register the signing certificate
Pikorua Security authenticates with signed JWTs, so your admin registers Pikorua Security's public certificate on the organization and no password is stored.
- 3
Map groups to vendors
Match each subcontractor access group to a Pikorua Security vendor, per site.
- 4
Pick gating rules
Decide which failures remove access and which only notify.
- 5
Forward entry events (optional)
Add a Rules Engine event forwarder pointed at Pikorua Security's REST hook URL to log entry attempts by held companies.
Openpath is now Avigilon Alta
Motorola Solutions announced its acquisition of Openpath in July 2021 and moved it under the Avigilon brand in 2023. The product is now Avigilon Alta cloud access control, managed in Alta Control Center, and openpath.com redirects to Avigilon. The API still lives at api.openpath.com, so you will see both names during setup.
Alta models access with users, credentials such as mobile and cards, entries for doors and gates, zones, sites and groups that tie people to the entries they can open. Groups are the clean lever for compliance: one group per subcontractor per site means a single membership change controls a whole crew.
Restore exactly what was there
Removing access is easy. Putting it back correctly is where manual processes fail. Before Pikorua Security removes a company's users from a group, it snapshots the membership. When the renewal is verified, it restores the same users to the same groups and leaves anyone added in the meantime alone.
Authentication uses signed JWTs tied to a certificate you register, not a shared password, and permissions are limited to the objects above. Every change appears in Pikorua Security's audit log and in Alta's own activity history.
More jobsite access & safety connectors
Teams that connect this usually connect these too.
FAQ
Avigilon Alta (Openpath) connector questions.
Pikorua Security is compliance software. It verifies certificates and endorsements against your contract requirements; it does not sell insurance or give legal advice.
Does the connector work with existing Openpath hardware?
Can it hold a single worker instead of a whole company?
How quickly does access change?
14-day free production trial
Connect Avigilon Alta (Openpath) during your 14-day trial.
Upload your current certificates, authorize Avigilon Alta (Openpath), and see which vendors would be on hold today before you switch a single rule on.