Set up the Paxton Net2 integration

Learn how to set up the Paxton Net2 integration. You'll need administrator access to Paxton Net2 and either the Account Owner or IT Support user role in OnLocation. 

This article covers:

How it works

By connecting OnLocation with Paxton Net2, your employees and guests can gain access to your location by signing into kiosks linked to access points mapped to Net2 doors. 

The integration works by establishing a connection between OnLocation and the Net2 server. OnLocation requires a public IP address that OnLocation will connect to, utilizing an HTTPS connection for secure communication. This ensures that data transmission remains encrypted and protected.

Once connected, OnLocation sends list door commands to Net2, which enables mapping between the access points in OnLocation and the doors in Net2.

OnLocation uses open-door commands to trigger door operations. By signing in on an OnLocation kiosk, authorized people can trigger the opening of doors within the Net2 system, providing a seamless sign in experience.

Screen Shot 2023-08-04 at 9.34.59 AM.png

Before you start

  • You must have an active Paxton Net2 installation, with your users and doors configured. 
  • Ensure that you have set up the public IP:
    • It requires a fully qualified URL with protocol and port. For example,
    • You need a valid CA-signed certificate or use Paxton Net2 Certificate Manager to create an SSL certificate. 

Step 1: Set up the Net2 installation

We recommend using the existing System Engineer user in Net2. If you don't want to do this, you'll need to create a new user and a new operator. Check the Paxton technical documentation for help. 

To set up Net2: 

  1. On your PC, search for Net2 Server Configuration Utility, then click to open it.
  2. In the Security tab, clear the LocalAPI checkbox.
  3. Click OK and Yes to confirm that you want to restart the Net2 server. 

Step 2: Download the OnLocation license file

You need the Account Owner or IT Support user role to access integration settings in OnLocation.

  1. In OnLocation, go to Tools > Account.
  2. Select Integrations from the menu on the left.
  3. Click on Paxton Net2.


  4. Click Download the OnLocation license file.
  5. On your PC, locate the file. You must move it to your Paxton installation folder. Do not change the file title. By default, it is saved here: 
        C:\Program Files (x86)\Paxton Access\Access Control\ApiLicences
  6. (Optional) Open the URL in a browser to ensure that the URL is publicly accessible. If it works, you'll see the Paxton Net2 API docs. 

Step 3: Connect Paxton Net2 with OnLocation

You need the Account Owner or IT Support user role to access integration settings in OnLocation.

  1. Go to Tools > Account.
  2. Select Integrations from the menu on the left.
  3. Click on Paxton Net2.
  4. Click Enable, then click Confirm.


  5. In the Enabled Integrations tab, select Manage Settings.


  6. Click Add Installation.


  7. Enter the Net2 username you selected when adding an operator to Net2.
  8. Enter the password used when adding an operator in Net2.
  9. Enter the public IP address that was created for the integration. 
  10. Enter the installation name. This is used to help distinguish between multiple Net2 installations in OnLocation.
  11. Select the locations that will be using this integration.
  12. Click Connect.


  13. When the page refreshes there will be a new menu on the left and you will now be in the Paxton Net2 overview.


Step 4: Map your OnLocation access points to Net2 doors  

In the Doors and Access Points page, for each location, map the OnLocation access points to doors in Net2.

  1. Select the access point or click Add Access Point if you need to add one.
  2. Enter the Access Point Name.
  3. (Optional) Select the default zone.
  4. (Optional) Select the zones if this access point connects to multiple zones.
  5. Select Sign In/Out or Inter-zone as the Access Point Type.
  6. Click Save.


  7. Click Save and Next.


Step 5: Choose who can open a door after signing in

In the Settings page, configure when to allow access when someone signs in via an access point connected to a Paxton-controlled door.

If you don't want to permit all sign in methods, you can keep these settings disabled and use triggers to customize who can gain building access. 

To choose your kiosk settings:

  1. Use the toggles to choose if employees can open doors and if global roaming employees also have permission.
  2. Choose if the integration will open doors for pre-registered visitors, all visitors, or if visitors cannot automatically open a door.
  3. Choose if contractors can open a door after signing in.
  4. Choose if notifications are to be sent to users in the event of an error with the net2 configuration.
  5. Click Save.

Next step: Try signing in someone on your kiosk to check that the expected door opens. If you have any issues, check that the doors and access points have been mapped correctly.