Lenel S2 OnGuard 8.3

Mapped's LenelS2 OnGuard 8.3 integration is a Mapped Universal Gateway (UG) enabled connector, which connects access activity events from OnGuard installations to the Graph in the Mapped cloud. To use this integration with your Lenel OnGuard system, you'll need to contact your LenelS2 representative and obtain the necessary licenses.

Capabilities

• Discover Readers on your Lenel server
• Record access granted and access denied events for readers.
  • The Lenel S2 OnGuard 8.3 connector anonymizes any badge or credential data, allowing you to identify individuals without exposing personally identifiable information, for use with de-duplication routines or other advanced analysis.

Use Cases

Potential use cases include:

• Measuring building occupancy
• Finding patterns in space utilization
• Identifying areas of concern in your building

Prerequisites

Supported Lenel OnGuard OpenAccess Versions

• OnGuard 8.2
• OnGuard 8.3

Procure Licenses

• You'll need a license for the WebSDK.
• You'll need a license from Lenel for the Mapped integration.

Install WebSDK

• Contact your Lenel OnGuard system integrator for assistance in enabling the WebSDK and setting up the Mapped port number.
• Create the WebSDK user with standard permissions according to WebSDK installation documentation.
• This integration requires use of the Subscription API and the Lnl_Reader entity.
• Ensure the application server exposes the standard Lenel OpenAccess ports of 8080 and 443.

Mapped Configuration

Contact Support

• Contact Mapped support for assistance with configuring your Mapped UG Agent with your Lenel integration.
• You'll need to be able to securely send the configured credentials to Mapped support for configuration of the integration.

Discovered Readers

• After the integration setup is completed, the UG Agent application will discover readers and events from your Lenel system.
• Discovered devices can be mapped to their locations in the Mapping tab of the Mapped Universal Gateway connector on the Connectors view of the Mapped Console. Mapped support is available to assist with mapping devices to locations here.

Mapped Concepts

Connector Concept	Mapped Type
Panel, Reader	Access_Control_Unit, Access_Reader
Event	Access_Activity_Status

Sample Code

Here's an example that shows how to retrieve the access control events for a set time period and for a specific unit - note you will need to use json for the value type, not a float or integer. The schema for the json follows the example below.

Request Response
Copy
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
{
  things(filter: {id: {eq: "THGH4Mtf45q8ew8Ty2aCxABcd"}}) {
    id
    name
    exactType
    points {
      id
      name
      exactType
      series(startTime: "2025-05-14T00:48:00.000", endTime: "2025-05-14T00:48:59.000") {
        timestamp
        value {
          json
        }
      }
    }
  }
}

Event JSON Schema:

Copy
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
{
  "$id": "https://schemas.mapped.com/mapped/1.0/core/Access_Activity_Status/complexValue.schema.json",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Access_Activity_Status:ComplexValueSchema",
  "type": "object",
  "properties": {
    "result": {
      "type": "string",
      "enum": [
        "denied",
        "granted"
      ]
    },
    "credentialIdentity": {
      "type": "object",
      "properties": {
        "type": {
          "type": "string",
          "enum": [
            "Access_Credential_Identity"
          ]
        },
        "value": {
          "type": "string"
        },
        "scope": {
          "type": "string",
          "enum": [
            "CONNECTOR"
          ]
        },
        "scopeId": {
          "type": "string"
        }
      }
    },
    "reason": {
      "type": "string"
    }
  }
}

Note - any AccessCardIdentifier associated with a result has been anonymized.