Set up the Paxton Net2 integration

This article covers:

• How it works
• Before you start
• Step 1: Set up Paxton Net2
• Step 2: Download the OnLocation license file
• Step 3: Connect Paxton Net2 with OnLocation
• Step 4: Map your OnLocation access points to Net2 doors
• Step 5: Choose who can open a door after signing in

How it works

By connecting OnLocation with Paxton Net2, your employees and guests can gain access to your location by signing in at kiosks linked to Net2-accessed access points mapped to Net2 doors. 

The integration establishes a connection between OnLocation and the Net2 server. OnLocation requires a public IP address to which it will connect, using an HTTPS connection for secure communication. This ensures that data transmission remains encrypted and protected.

Once connected, OnLocation sends door command lists to Net2, enabling mapping between OnLocation access points and Net2 doors.

OnLocation uses open-door commands to trigger door operations. By signing in at an OnLocation kiosk, authorised users can trigger door openings within the Net2 system, providing a seamless sign-in experience.

Before you start

• You must have an active Paxton Net2 installation, with your users and doors configured. 
• Ensure that you have set up the public IP:

  • It requires a fully qualified URL with protocol and port. For example, https://203.0.113.1:8443

  • You need a valid CA-signed certificate or use Paxton Net2 Certificate Manager to create an SSL certificate. 

Step 1: Set up the Net2 installation

We recommend using the existing System Engineer user in Net2. If you don't want to do this, you'll need to create a new user and a new operator. Check the Paxton technical documentation for help.

To set up Net2:

1. On your PC, search for Net2 Server Configuration Utility, then click to open it.
2. In the Security tab, clear the LocalAPI checkbox.
3. Click OK and Yes to confirm that you want to restart the Net2 server.
   

Step 2: Download the OnLocation license file

You need the Account Owner or IT Support user role to access integration settings in OnLocation.

You can access 'OnConnect' in two ways to enable the integration:

From the Top Navigation Bar

1. Click the OnConnect icon in the top-right corner, next to the Favorites icon.
2. Hover to see the tooltip "OnConnect".
3. Click to go directly to OnConnect.
   

From the Account Menu

1. Go to: Tools > Account.
2. Select OnConnect from the left-hand menu.
3. Click MRI Onlocation Integrations.
4. Locate the Paxton Net2 integration.
5. Click Learn More.
   
6. Click Enable, then click Confirm.
   
   You will be redirected to the MRI Onlocation Integrations page. 
7. Select Settings.
   
8. Click Download the OnLocation license file.
9. On your PC, locate the file. You must move it to your Paxton installation folder. Do not change the file title. By default, it is saved here: C:\Program Files (x86)\Paxton Access\Access Control\ApiLicences
10. (Optional) Open the URL in a browser to verify that it is publicly accessible. If it works, you'll see the Paxton Net2 API docs.

Step 3: Connect Paxton Net2 with OnLocation

You need the Account Owner or IT Support user role to access integration settings in OnLocation.

1. In the Enabled Integrations tab, select Manage Settings.
   
   
2. Click Add Installation.
   
   
3. Enter the Net2 username you selected when adding an operator to Net2.
4. Enter the password used when adding an operator in Net2.
5. Enter the public IP address assigned to the integration.
6. Enter the installation name. This is used to help distinguish between multiple Net2 installations in OnLocation.
7. Select the locations that will be using this integration.
8. Click Connect.
   
9. When the page refreshes, a new menu will appear on the left, and you will be in the Paxton Net2 overview. 
   

Step 4: Map your OnLocation access points to Net2 doors  

In the Doors and Access Points page, for each location, map the OnLocation access points to doors in Net2.

1. Select the access point, or click Add Access Point to add one.
2. Enter the Access Point Name.
3. (Optional) Select the default zone.
4. (Optional) Select the zones if this access point connects to multiple zones.
5. Select Sign In/Out or Inter-zone as the Access Point Type.
6. Click Save.
   
   
    
7. Click Save and Next.
   
   

Step 5: Choose who can open a door after signing in

In the Settings page, configure when to allow access when someone signs in via an access point connected to a Paxton-controlled door.

If you don't want to allow all sign-in methods, you can keep these settings disabled and use triggers to customize who can gain building access.

To choose your kiosk settings:

1. Use the toggles to determine whether employees can open doors and whether global-roaming employees also have permission.
2. Choose whether the integration will open doors for pre-registered visitors, all visitors, or neither.
3. Choose if contractors can open a door after signing in.
4. Choose whether notifications should be sent to users in the event of an error with the Net2 configuration.
5. Click Save.