HqO

Mobile Access & Digital Keys

HqO integrates with a range of access control providers so tenants can use their phone as a building credential — activating a digital key in the HqO app and unlocking doors at compatible readers.

Choosing a mobile access approach

HqO supports several categories of mobile access systems:

ApproachDescription
Wallet-based credentialsCredentials issued to Apple Wallet and Google Wallet through HID Origo — no Bluetooth pairing or separate app required. This is HqO's recommended solution and requires an access control system (ACS) connected to HID Origo. See HID Integration.
Full access control + visitor managementSystems that manage both mobile credentials and visitor access (QR code check-in, lobby systems). Best for larger or complex properties that need visitor flow management, security compliance, or tenant administration.
Mobile credential-onlyCloud-based credentialing without visitor check-in, such as Genea. Cost-effective for buildings with minimal front desk operations.

Mobile access must be included in your HqO contract. Contact your HqO Customer Success Manager to discuss which option fits your building.

For HID — HqO's most widely deployed mobile access integration — see the dedicated HID Integration guide. The providers below are also supported.

SwiftConnect

SwiftConnect provisions mobile access through Apple Wallet using NFC — tenants access their office and tenant suite with a single wallet card. Android users get NFC mobile access through the HqO app.

Regional availability: North America

Requirements

  • HID readers with NFC enabled
  • A compatible access control system:
    • Lenel OnGuard
    • S2 NetBox
    • Software House C-CURE 9000
    • AMAG Symmetry
    • Genetec Synergis
    • RS2 AccessIt Universal
    • Feenics Keep
    • Honeywell Pro-Watch
    • Honeywell EB
    • TDS
    • Avigilon ACM
    • Brivo OnAir
    • OpenOptions

If your building meets these requirements, contact your HqO Customer Success Manager to begin implementation.

Openpath

Openpath is a cloud-based access control solution. Tenants use mobile access or key fobs at Openpath readers through the HqO app.

Regional availability: North America and Europe. The Openpath Command portal is available in English only.

Activating a credential

  1. The tenant selects the Mobile Access utility button and enables location services.
  2. The tenant enables their virtual key card.
  3. The credential is entered into the ACS automatically — this takes about 5–10 seconds.
  4. The mobile card appears on screen. With Bluetooth on, the tenant waves their phone near a reader to unlock the door.

Setup

  1. The property provides its Organization ID, found in the Openpath portal URL.
  2. HqO sends a super user email address.
  3. The property creates an HqO super user in Openpath with the Portal Access toggle enabled and the user role set to Super Admin.

Zone sharing

Openpath supports sharing zones across multiple Openpath portals:

  1. Share the HqO admin email with the participating portal.
  2. When adding the user, check Add a user from an existing namespace and use the format org:building-namespace.
  3. The building shares zones through Zone Management.
  4. Tenant groups check Zone Access for the shared zones in group management.

Kastle Access

Kastle is an access provider that supports both hard cards and mobile access at Kastle readers.

Regional availability: North America

How activation works

  1. The tenant signs into the HqO app, completes onboarding, and taps Activate card.
  2. HqO's API verifies that the tenant's email exists in the Kastle portal and that a mobile credential has been issued.
    • Success: the tenant is notified and their access cards activate.
    • Failure: an error explains that the account was not found in Kastle or no mobile credential was issued.
  3. Once active, the tenant taps their phone at a Kastle reader. The reader shows a green light when access is approved and a red light when denied.

Device settings

  • Bluetooth must be on.
  • Location must be set to While Using the App at minimum; set it to Always Allow for the credential to work while the app is in the background.

Datawatch Systems

Datawatch is an access control solution that manages users, hard cards, mobile access, and access levels for HID readers. The HqO integration enables mobile access to HID readers through the HqO app.

Regional availability: North America

How activation works

  1. The tenant opens the HqO app and selects the Mobile Access utility button.
  2. The tenant taps Activate Card.
  3. If the tenant is not yet in the Datawatch system, Datawatch receives an email about the access request.
  4. Once entered, mobile access becomes active.

Contact your Datawatch representative and your HqO Customer Success or Implementation Manager to initiate setup.

BluB0x

BluB0x is an access provider supporting physical cards and mobile access. The integration leverages BluB0x's API and HID's SDK behind the HqO app interface.

Regional availability: North America and Europe

Setup

BluB0x provides three items to configure the integration:

ItemPurpose
HID Part NumberIdentifies the credential type
Facility CodeSite-level code for the credential
Facility IDIdentifies the facility in BluB0x

Activating a credential

  1. The tenant selects the Mobile Access utility button and completes onboarding.
  2. The tenant enables location services and activates their card.
  3. The ACS manager enters the credential into the access control system.
  4. The activated mobile card appears on screen. With Bluetooth on, the tenant waves their phone near a reader to unlock the door.

STid

STid is an access provider supporting physical cards and mobile access at STid readers.

Regional availability: North America and Europe

Setup

In the STid portal:

  1. Create an HqO Administrator user and share its client_id and client_secret with HqO.
  2. Provide the Customer Site name.
  3. Send the Reader Configuration name.

Activating a credential

  1. The tenant selects the Mobile Access utility button and completes onboarding.
  2. The tenant enables location services and activates their card. The credential requires manual entry into the access control system.
  3. The tenant receives confirmation when activation completes, then holds their phone in front of a reader to unlock the door. A checkmark on the reader symbol confirms access.

On-site testing

Every mobile access rollout should include an on-site testing phase before launch:

  1. Identify test users — the property team and security personnel are recommended (3–5 testers for STid).
  2. HqO permissions the testers to see the mobile access utility button.
  3. Enter testers into the provider's portal or ACS with appropriate access levels.
  4. Test for approximately one week, depending on the number of readers.
  5. Optionally run a second phase with a friendly tenant.
  6. Report results to HqO and the access provider.

Frequently Asked Questions

These apply across mobile access providers:

What device settings are required? Bluetooth must be on and location services enabled. Location services wake the app so it can broadcast Bluetooth in the background — set location to Always for hands-free operation.

How long does activation take? Where credentials require manual entry into the ACS, activation typically takes 24–72 hours. Openpath enters credentials automatically in 5–10 seconds.

How close should I hold my phone to the reader? About 3–4 inches from the reader. Do not physically touch the phone to the reader.

Can I keep using my physical card? Yes — physical cards and mobile credentials work simultaneously.

Does it work without WiFi? Yes. The app communicates with readers over Bluetooth, so it works in basements, elevators, and parking structures.

Does it work on suite doors? Mobile access works at base building entrances managed by building management. Suite-level doors controlled by individual tenants require a separate system, except where a provider (such as SwiftConnect) explicitly supports suite access.

I already have the provider's own app — do I need to switch? Yes. Uninstall the standalone provider app (for example, Openpath or Kastle) and activate a new credential through the HqO app.

What if I delete the HqO app or lose my phone? Request a new mobile credential from your property team.

Was this page helpful?

Ask HelpHub

Ask me anything about HqO

I can help you find information in the documentation.