# PDK integrations > Connect PDK cloud access control to your business systems and cut out manual security management. **Canonical page:** https://tray.ai/connectors/pdk-integrations/ **Categories:** Security and compliance, General automation services **Documentation:** https://tray.ai/documentation/connectors/service/pdk ## Overview PDK (Professional Door Keeper) is a cloud-based physical access control platform used by facilities teams, IT administrators, and security operators to manage door access, credentials, and real-time entry events. Integrating PDK with your broader tech stack lets you automate credential provisioning, sync access rights with HR and identity systems, and pipe security events into your monitoring and alerting workflows. With tray.ai, you can build automations that keep your physical security posture in sync with every employee onboarding, offboarding, or role change — no manual intervention needed. ## Use cases ### Employee Onboarding Access Provisioning When a new employee is added to your HRIS or identity provider, automatically create a PDK credential and assign the appropriate access groups based on department, location, or job role. No more lag between a start date and the ability to get through the right doors, and no risk that someone hands out broader access than your policy allows. - Eliminate manual credential creation for every new hire - Automatically assign access groups based on department or role attributes from your HRIS - Reduce first-day friction for new employees who need immediate facility access ### Employee Offboarding and Access Revocation Trigger immediate PDK credential deactivation or deletion when an employee is terminated in your HR system or identity provider — Okta, Workday, wherever. Revoking access in real time shrinks your exposure window and removes a manual step from your offboarding checklist that's too easy to forget. - Instantly revoke physical access when HR marks an employee as terminated - Reduce security risk from delayed manual offboarding - Generate an audit log entry confirming access revocation for compliance reporting ### Real-Time Security Event Alerting Stream PDK door events — forced entry, door held open, repeated failed access attempts — into your Slack, PagerDuty, or Microsoft Teams channels so security and facilities teams can respond immediately. You can filter events by door, time of day, or access group to cut noise and surface only the alerts that actually matter. - Deliver actionable security alerts to the right team channels in seconds - Filter and route events by severity, location, or credential type - Reduce mean time to respond to physical security incidents ### Visitor Management and Temporary Access Integrate PDK with your visitor management system or calendar tools to automatically issue time-limited credentials when a visitor appointment is confirmed, then revoke them after the meeting window expires. Front desk staff don't need to manually issue and collect visitor badges. - Auto-provision visitor credentials tied to confirmed calendar events or check-in records - Set automatic credential expiry to eliminate forgotten temporary access - Sync visitor entry logs back to your visitor management or ticketing system ### Access Rights Reconciliation and Audit Reporting Periodically pull PDK access group memberships and credential lists, compare them against your authoritative identity source, and flag or fix discrepancies automatically. Your physical access data stays in sync with HR and IT records without quarterly manual audits that nobody has time for. - Detect orphaned credentials belonging to former employees or contractors - Generate compliance-ready reports mapping physical access rights to job roles - Automatically remove or flag credentials that don't match your identity source of truth ### Role and Department Change Access Updates When an employee changes departments, gets promoted, or transfers to a new office location, automatically update their PDK access groups to reflect their new role — no helpdesk ticket, no facilities request. Access rights stay current with organizational changes as they happen. - Eliminate access update delays caused by manual helpdesk workflows - Ensure employees gain and lose access simultaneously during role transitions - Reduce over-provisioned access that accumulates as employees change roles over time ### Security Incident Ticketing from Access Events When PDK reports a high-priority event — a forced door, tailgating alert, or access denial on a sensitive area — automatically create a ticket in ServiceNow, Jira, or Zendesk and assign it to the right security team member. Raw physical security events become trackable work items instead of noise. - Convert physical security events into tracked incidents without manual data entry - Route tickets to the correct team based on door location or event type - Maintain a complete audit trail of security incidents and their resolution ## Templates ### New Employee → PDK Credential Provisioning Automatically create a PDK user and assign access groups when a new employee record is created in BambooHR, Workday, or another HRIS, mapping department and location fields to the correct PDK access groups. Connectors used: PDK, BambooHR, Slack ### Okta Deprovisioning → PDK Access Revocation When a user is deactivated or suspended in Okta, immediately deactivate their PDK credential and log the revocation event to a Google Sheet or Airtable for compliance tracking. Connectors used: PDK, Okta, Google Sheets ### PDK Forced Entry Alert → PagerDuty Incident Monitor PDK for forced entry or door-held-open events and automatically create a PagerDuty incident, routing it to the on-call security team with door location and event details. Connectors used: PDK, PagerDuty, Slack ### Calendly Visitor Booking → Temporary PDK Credential When a visitor appointment is booked via Calendly or Google Calendar, issue a time-limited PDK visitor credential and send access instructions to the visitor by email, then revoke the credential automatically after the appointment ends. Connectors used: PDK, Calendly, Gmail ### Weekly PDK Access Audit Report Every week, pull all PDK credentials and access group memberships, cross-reference them against your active employee list in your HRIS, and email a discrepancy report to your IT security team. Connectors used: PDK, BambooHR, Gmail, Google Sheets ### PDK Access Denial Spike → ServiceNow Security Ticket Detect when a specific door or credential sees an unusual volume of access denials within a short window and automatically open a ServiceNow incident for investigation. Connectors used: PDK, ServiceNow, Slack ## Challenges Tray.ai solves ### Keeping Physical Access in Sync with HR Lifecycle Events HR systems, identity providers, and physical access control systems run in separate silos with no native integration. Access provisioning and revocation end up depending on manual processes or helpdesk tickets that introduce dangerous delays — especially during offboarding. **How Tray.ai helps:** tray.ai connects PDK directly to your HRIS and identity provider, triggering credential changes the moment lifecycle events occur. Automated workflows run in seconds rather than hours or days, closing the gap between HR decisions and physical access reality. ### Handling PDK API Pagination and Rate Limits at Scale When pulling large volumes of credential or event data from PDK for audits or reconciliation, you have to handle API pagination, rate limit retries, and error handling carefully. One-off scripts that skip this tend to break at the worst possible time. **How Tray.ai helps:** tray.ai's built-in PDK connector handles pagination and retry logic automatically, so you can build reliable data pipelines that pull complete credential and event datasets without writing custom error handling code. ### Routing the Right Security Events to the Right Teams PDK generates a lot of door events. Without intelligent filtering and routing, teams either drown in noise or miss the alerts that matter. PDK itself has no way to build conditional routing logic across external systems. **How Tray.ai helps:** tray.ai's workflow logic lets you filter PDK events by type, door, time window, or credential attributes and route them to different destinations — Slack channels, PagerDuty, ServiceNow — based on your actual escalation policies. ### Enforcing Least-Privilege Physical Access Across Role Changes As employees change roles, departments, or office locations, their physical access groups tend to accumulate without cleanup. That's a least-privilege violation, and finding over-provisioned credentials manually is slow and error-prone. **How Tray.ai helps:** tray.ai can trigger access group updates in PDK whenever role or department changes are detected in your HRIS, simultaneously adding new access rights and removing old ones so credentials always reflect the employee's current role — not their history. ### Building a Compliant Audit Trail Across Physical and Digital Systems Compliance frameworks like SOC 2, ISO 27001, and FedRAMP require demonstrable evidence that physical access is granted and revoked appropriately and that all changes are logged. Manually compiling that evidence from PDK and HR systems is slow, inconsistent, and painful right before an audit. **How Tray.ai helps:** tray.ai workflows automatically write PDK provisioning and revocation events to centralized audit logs in Google Sheets, Airtable, or your SIEM, building a continuous, timestamped record of all access changes that satisfies auditor requirements without manual data gathering. ## Agent features ### Look Up Contact Records (Data Source) Retrieve contact information from PDK, including personal details, access credentials, and associated groups. An agent can use this data to verify identities or provide context for access-related decisions. ### Query Access Events and Audit Logs (Data Source) Fetch historical access event logs from PDK to review entry and exit activity for specific doors, zones, or individuals. An agent can analyze patterns, spot anomalies, or pull compliance reports. ### Retrieve Door and Reader Status (Data Source) Pull real-time status for doors, readers, and panels managed within PDK. An agent can check whether doors are locked, unlocked, or in an alarmed state to support security workflows. ### Fetch Credential Information (Data Source) Look up credential details such as access cards, PINs, or mobile credentials assigned to individuals. An agent can use this to confirm access rights or flag expired and inactive credentials. ### List Access Groups and Permissions (Data Source) Retrieve configured access groups and their permission sets from PDK. An agent can use this to see who has access to which areas and flag discrepancies or over-provisioning. ### Create or Update Contacts (Agent Tool) Add new contacts or update existing records in PDK, including assigning credentials and access groups. An agent can handle onboarding automatically by provisioning physical access when a new employee is added in an HR system. ### Revoke or Suspend Access (Agent Tool) Disable or revoke credentials and access permissions for a contact in PDK. An agent can suspend access automatically when an employee is offboarded or a security incident is detected. ### Unlock or Lock a Door (Agent Tool) Trigger a remote lock or unlock command for a specific door or reader in PDK. An agent can respond to authorized requests or scheduled events to manage physical entry points programmatically. ### Assign Credentials to Contacts (Agent Tool) Issue and assign access credentials such as card numbers or mobile passes to contacts within PDK. An agent can handle credential provisioning as part of an onboarding or visitor management workflow. ### Manage Access Groups (Agent Tool) Create, update, or assign contacts to access groups within PDK. An agent can adjust group memberships based on role changes, project assignments, or policy updates from connected business systems. ### Trigger Visitor Provisioning (Agent Tool) Create temporary contacts and credentials in PDK for visitors or contractors who need time-limited access. An agent can automate visitor check-in by generating short-term credentials tied to scheduled meetings or events. ## Learn more - Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/ - Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/ - Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/ - Book a demo: https://tray.ai/contact/