Converging Physical and Cyber Access

For decades, the team that issued door badges and the team that issued logins never spoke. That separation is an attacker's gift: a contractor offboarded in HR can keep a working badge for weeks, and a tailgater inside the building often inherits network trust nobody re-checks.

One identity, two doors

Convergence means a single authoritative identity drives both physical and logical access, so a single offboarding event revokes the badge and the token together. It also means physical signals — a badge-in event — can feed conditional access decisions for the network, and vice versa.

• Tie badge provisioning to the same joiner-mover-leaver workflow as accounts.
• Feed physical presence into network access decisions where it raises assurance.
• Monitor for the mismatch: a network login from a user with no badge-in that day.