Mobile access control: How the cloud takes it to the next level

Mobile access control offers various benefits for users and administrators. When deployed in a cloud architecture, mobile access control benefits become even more obvious and noticeable. This article takes a closer look at cloud-based mobile access control, its benefits and some of the challenges that need to be addressed.
 

Benefits of mobile access control in cloud

 
Mobile access control entails the opening of doors with the user’s smart device. When paired with cloud or ACaaS (access control as a service), mobile access control offers several benefits. These are summarized as follows.
 
Central management/remote provisioning: One of the key benefits of cloud-based mobile access control is the ability to centrally manage the credentials across multiple sites. Also, since mobile credentials are digital, they can be issued and revoked remotely and instantly.
 
“The shift to cloud-based access control has been the biggest enabler of mobile credentials at scale. Historically, managing badges meant time consuming on-site printing and manual processes. The cloud completely changes that dynamic by allowing admins to securely provision, update, or revoke access rights remotely from anywhere,” said Manas Baba, Senior Manager of Product Marketing at Verkada.
 
This can be beneficial for different stakeholders.
 
“For employees, students, and guests, the experience becomes seamless. Credentials are issued directly to their mobile devices, access permissions update instantly, and if a device is lost or stolen, credentials can be revoked in seconds. The old routine of making a trip to the badge office for a replacement card is entirely eliminated,” Baba said.
 
For administrators, the benefits are even greater. “Credentials can be issued, modified, or revoked remotely. Access permissions can be updated across multiple locations from a centralized dashboard. If an employee leaves the organization, access can be removed immediately. If a contractor needs temporary access, administrators can assign time-limited permissions that expire automatically,” said Kumar Sokka, CEO of Acre Security.
 
Improved visibility: Cloud-based mobile access also improves visibility. “Security teams can see access activity across their portfolio, generate audit reports, investigate incidents, and respond to unauthorized access attempts without dispatching someone to each site,” Sokka said.
 
Scalability: Finally, cloud-based mobile access control allows better scalability across sites.
 
“In a traditional badge environment, every new employee, contractor, or tenant requires a physical credential to be produced, distributed, tracked, replaced if lost, and manually revoked when access is no longer needed. That process becomes increasingly complex across multiple sites. With mobile access control, credentials are digital. Administrators can issue them remotely, apply access rights by role or location, and revoke them instantly. This makes it much easier to onboard large numbers of users, support distributed locations and expand into new buildings or regions,” Sokka said.
 

A word on subscription

 
Typically, cloud-based mobile access control relies on a monthly subscription fee. Subscription models vary by provider.
 
“Some vendors charge per credential, some charge per user, some charge per door, and others bundle mobile access into a broader cloud or ACaaS subscription. In some cases, organizations may also pay based on sites, integrations, administrative features, or transaction volume,” Sokka said.
 
He emphasizes that the important point is to evaluate the total cost of ownership, not just the subscription line item.
 
“Physical badges also carry recurring costs: card production, printing supplies, shipping, replacements, administrative labor, lost badge workflows, and security risk when credentials are not promptly revoked. In many enterprise environments, mobile credentials can reduce overall costs even when there is a subscription fee,” Sokka said. “Organizations often spend hundreds of dollars per employee over several years on credential production, issuance, replacement, and administration. By eliminating many of those processes, mobile access can reduce total cost of ownership while improving security and user experience.”
 

Key points to consider

 
While cloud-based mobile access control offers several advantages, there are also certain caveats that should be considered. First and foremost, careful planning must be made around cybersecurity and privacy protection. Further, cloud-based mobile access control relies on constant connection to the Internet, and backup plans are needed in case connectivity is down.

"Many enterprise, government, financial and critical infrastructure customers still prefer or require on-premises deployment because of cybersecurity, data sovereignty and compliance concerns. Employee identity information and access records are sensitive data, and some organizations are not comfortable placing all access control data in a third-party cloud environment. Connectivity is another key issue; a purely cloud-dependent architecture may create operational risk if internet access is interrupted,” said Raymond So, GM of Armatura.
 
This is where a hybrid approach to mobile access control deployment may be ideal. “The ideal model is often a secure hybrid architecture that combines cloud management convenience with reliable local access control continuity,” So said.

Sokka further mentions the importance of flexibility. While many cloud mobile access providers bill themselves as “mobile first,” other types of credentials and authentication means should also be supported.
 
“Mobile-first should not mean mobile-only. A strong access control strategy needs flexibility. Not every user will have a smartphone. Some employees may prefer a physical badge,” Sokka said, adding that is why mixed-credential support is important.
 
“Organizations should be able to support mobile credentials alongside traditional smartcards, proximity badges, PINs, temporary credentials, or other approved authentication methods. This allows some users to rely on mobile credentials, others to use physical badges, and some to use both,” he said.