Salto KS Integration
Overview
Salto KS (formerly known as Salto Space) is a cloud-based access control platform that provides flexible, wire-free smart locks with mobile and RFID access capabilities. The Nexudus integration with Salto KS automates credential provisioning and access group assignments based on customer contracts, passes, bookings, and desk assignments. It also includes full support for Salto Eloxx (Gantner) smart lockers, enabling customers to reserve and unlock lockers directly from the Nexudus Passport app.Key Features
- Cloud-based management: Manage access from anywhere through Salto’s web platform
- OAuth authentication: Seamless connection without API keys - just connect and authorize
- Mobile access: Customers can use mobile keys through the Salto app integrated with Nexudus Passport
- Wire-free installation: Battery-powered smart locks with no wiring required
- Automatic provisioning: Access is granted and revoked automatically based on plan changes, bookings, and pass assignments
- Locker management: Full support for Salto Eloxx (Gantner) smart lockers with self-service reservations and remote unlock
- Visitor support: Time-limited credentials for visitors with automatic expiry
- Check-in tracking: Use door unlock events to automatically check customers in/out
- Multi-site support: Manage multiple Salto sites from a single Nexudus location
- RFID card support: Traditional access cards with tag number assignments
- Group-based permissions: Map your inventory (passes, resources, desks) to Salto access groups
Integration Type
Cloud-based — Salto KS operates entirely in the cloud with battery-powered smart locks.Capabilities
How It Works
Access Control Model
Salto KS uses a site users and groups model:- Sites: Each physical location is a separate site in Salto (you can have multiple sites)
- Site Users: Each customer is created as a site user with their email, name, and optional RFID tag
- Access Groups: Permissions are organized into groups (e.g., “24/7 Access”, “Meeting Room A”)
- Locks: Individual smart locks at doors controlled through the cloud platform
- Credentials: Users receive mobile keys, RFID tags, or both to access doors
- Creates or updates their Salto site user profile
- Assigns them to the appropriate access groups
- Provisions credentials (mobile key or RFID tag)
- Updates or revokes access when contracts change
Multi-Door Support
Salto KS uses access groups to grant permissions to multiple locks. Instead of mapping each lock individually:- In Salto, create an access group (e.g., “Coworking Space Access”)
- Add the relevant locks to that group in Salto
- In Nexudus, map your pass/resource/desk to that access group
- Customers with that pass automatically get access to all locks in the group
Mobile Access Integration
Customers can use the Salto app to unlock doors using their smartphone. The integration works seamlessly with the Nexudus Passport app:- When a customer signs in to Nexudus Passport, they can connect their Salto account
- Mobile keys are automatically provisioned based on their Nexudus access
- Customers can unlock doors directly from the Salto app on their device
- Mobile access follows the same rules as physical cards (based on passes, bookings, and contracts)
Prerequisites
Before connecting Nexudus to Salto KS, ensure you have:- Active Salto KS account with administrator access
- Salto site configured with smart locks installed and online
- Access groups created in Salto for different access levels (e.g., 24/7 access, business hours only)
- Nexudus location configured with plans, passes, and resources
Configuration
Step 1: Connect to Salto
- In the Nexudus dashboard, go to Settings > Integrations
- Find Salto in the list and expand the settings
- Toggle Enable Salto integration to ON
- Click Connect button
- You’ll be redirected to Salto’s login page
- Sign in with your Salto administrator credentials
- Grant Nexudus permission to access your Salto account
- You’ll be redirected back to Nexudus
Step 2: Select Your Site
If you have multiple Salto sites:- From the Site dropdown, select the site that corresponds to this Nexudus location
- Click Save to apply the selection
- The page will reload showing the locks and access groups for the selected site
Step 3: Configure Presence Tracking (Optional)
Salto can trigger automatic check-ins when customers unlock specific locks.- In the Presence Tracking section, you’ll see all locks from your Salto site
- For each lock, choose an action:
- Nothing: Lock access is tracked in Salto but doesn’t affect Nexudus presence
- Check In: Unlocking this lock checks the customer in
- Check Out: Unlocking this lock checks the customer out
- Toggle: Unlocking switches between checked in and checked out
- Set the main entrance lock to Check In
- Set the exit lock to Check Out
- Set internal locks to Nothing (access granted but doesn’t affect presence)
- When a customer unlocks a door using their RFID tag, mobile key, or remote unlock, Salto sends an event to Nexudus
- Based on your configuration, Nexudus automatically checks them in, out, or toggles their presence
- The customer is identified by their RFID tag number or email address
- Events are processed in near real-time (typically within seconds)
Step 4: Map Passes to Access Groups
Passes are the primary way customers receive access in Nexudus. Each pass can be mapped to a Salto access group.- In the Passes section, you’ll see all passes configured for this location
- For each pass, select the Salto Access Group that customers should be assigned to when they hold that pass
- Leave blank if a pass should not grant physical access
- When a customer has an active contract on a plan that includes passes, they automatically receive those passes
- If the pass is mapped to a Salto group, the customer is added to that group in Salto
- When the pass expires or is consumed, access is revoked
- Time-limited passes (e.g., day passes with validity windows) automatically grant and revoke access at the appropriate times
Step 5: Map Resources to Access Groups
Resources (meeting rooms, event spaces, etc.) can require specific access permissions for bookings.- In the Resources section, you’ll see all resources configured for this location
- For each resource, select the Salto Access Group required to access that space
- Leave blank if resource bookings should not grant physical access
- When a customer books a resource, Nexudus grants them access 15 minutes before the booking starts
- Access is automatically revoked when the booking ends
- If the booking is cancelled, access is removed immediately
- Booking guests also receive the same access for the booking duration
Step 6: Map Desks/Units to Access Groups
Floor plan desks and units can grant access to specific areas when included in a customer’s contract.- In the Desks/Units section, you’ll see all desks from your floor plans
- For each desk, select the Salto Access Group required to access that area
- Leave blank if desk assignments should not grant physical access
- When a desk is added to a customer’s contract, they receive access to the mapped access group
- Access is granted when the contract starts and revoked when it ends
- Team billing support: If a customer uses team billing (merged billing), they also receive access to desks included in the paying member’s contracts
Step 7: Configure Visitor Access (Optional)
Salto supports time-limited credentials for visitors.- Toggle Create visitor PIN codes to ON
- In the Visitor Group dropdown, select the Salto access group that visitors should receive
- Visitors can be assigned to only one group (unlike customer access which can span multiple groups)
- When a visitor is registered in Nexudus with an expected arrival time, Nexudus creates a temporary site user in Salto
- The visitor is assigned to the selected visitor access group
- PIN code generation: Salto automatically generates a unique PIN code for the visitor, which Nexudus retrieves and includes in the check-in notification sent to the visitor
- Access automatically expires:
- Guest on a booking: Access is revoked when the booking ends
- Regular visitor: Access expires at midnight (location’s time zone) on the arrival date
- When the visitor is marked as departed or deleted, their Salto credentials are removed immediately
- Visitors can use the Salto-generated PIN code, mobile keys, or RFID tags depending on how you provision their credentials
Step 8: Save Configuration
- Review all mappings to ensure they’re correct
- Verify access group names match your Salto system
- Click Save to apply the configuration
- Nexudus will immediately start provisioning access for customers based on the new mappings
How Access is Managed
When Access is Granted
Nexudus automatically grants Salto access when:- Contract starts: Customer begins a contract on a plan → receives passes included in that plan → assigned to corresponding Salto access groups
- Pass activated: Customer receives a pass directly (not via a contract) → assigned to the mapped Salto access group
- Booking created: Customer books a resource → granted access to resource’s group 15 minutes before booking start time
- Desk added to contract: Desk is added to an active contract → customer receives access to the desk’s mapped access group
- Booking guest added: Non-customer is added as a guest on a booking → granted access to resource’s group for the booking duration
- Visitor registered: Visitor is added with expected arrival date → receives access to visitor group
When Access is Revoked
Nexudus automatically revokes Salto access when:- Contract ends or cancelled: Customer loses passes from that contract → removed from corresponding Salto access groups
- Pass expires: Pass validity ends or usage is consumed → removed from mapped Salto access group
- Booking ends or cancelled: Booking time expires or is cancelled → access to resource’s group is removed
- Desk removed from contract: Desk is removed from contract → access to desk’s group is revoked
- Customer deactivated: Customer account is deactivated → all Salto access removed
- Visitor departed: Visitor is marked as departed or deleted → Salto credentials removed
Access Update Timing
- Immediate updates: Contract changes, pass assignments, and customer deactivations trigger access updates within seconds
- Booking lead time: Booking access is granted 15 minutes before the booking start time and revoked 15 minutes after the booking ends
- Background processing: Access updates are queued in background jobs to handle high volumes efficiently
- OAuth token refresh: Access tokens are automatically refreshed to maintain continuous connectivity
RFID Card Management
Salto supports traditional RFID access cards in addition to mobile keys. To assign cards to customers:- Go to Operations > Customers
- Select the customer
- In their profile, enter the card tag number in the Access Card ID field
- Separate multiple cards with commas:
123456,789012,345678 - Save the customer profile
- No card or mobile key: Site user exists in Salto but cannot unlock doors (no credentials)
- Card assigned: Customer can use physical RFID card to unlock doors
- Mobile key: Customer can use the Salto app on their smartphone to unlock doors
- Both assigned: Customer can use either physical card or mobile app
- Card removed: Physical card access is revoked (site user and mobile access remain)
- Card IDs are stored in Salto’s
tag_numberfield on the site user record - Card IDs should match the format expected by your Salto system
- The same card number can be used across different sites if needed
PIN Code Limitations
Locker Management (Salto Eloxx/Gantner)
Salto KS includes support for Salto Eloxx (also known as Gantner) smart lockers. These battery-powered electronic lockers integrate seamlessly with the Salto access control system, allowing customers to reserve, unlock, and release lockers directly from the Nexudus Passport app.Overview
The Salto Eloxx locker integration provides:- Automatic locker sync: Lockers and locker groups are automatically imported from Salto into Nexudus
- Self-service reservations: Customers can browse available lockers and reserve them through the Nexudus Passport app
- Remote unlock: Customers can unlock their reserved locker remotely from the app
- Audit trail: All locker actions (reserve, unlock, release) are logged with timestamps and customer details
- Push notifications: Customers receive notifications when they successfully unlock a locker
- Real-time availability: View which lockers are available, occupied, or offline
How Locker Management Works
Locker Sync Process
When you connect to Salto, Nexudus automatically:- Retrieves locker groups from your Salto site
- Creates resources in Nexudus for each locker group (one resource per group)
- Creates floor plan desks for each individual locker within the groups
- Syncs locker status (available, occupied, online/offline)
- A Resource in Nexudus with a special locker designation
- A Floor Plan containing all lockers in that group
- Individual Floor Plan Desks representing each physical locker
Locker Reservation Flow
- Customer browses available lockers in the Nexudus Passport app
- Only lockers the customer has permission to book are displayed
- Availability is shown in real-time
- Customer reserves a locker by selecting it from the list
- The locker is assigned to the customer
- Reservation timestamp is recorded
- Customer unlocks the locker using the “Unlock” button in the app
- Salto Eloxx lock receives the unlock command
- Customer receives a push notification confirming the unlock
- Customer releases the locker when finished
- Locker is unassigned and becomes available for others
- Release action is audited
Configuration
Step 1: Enable Locker Integration
The locker integration is automatically enabled when you:- Connect to Salto KS using OAuth
- Select a site that has Salto Eloxx lockers installed
Step 2: Sync Locker Data
After connecting Salto:- Go to Settings > Integrations
- Find the Salto integration
- Click Sync Salto Eloxx Locker data button
- Wait for the sync to complete
- Create a special resource type called “Salto Eloxx Lockers”
- Import all locker groups as resources
- Create floor plans for each locker group
- Import individual lockers as floor plan desks
Step 3: Configure Locker Permissions
Lockers are linked to Resources in Nexudus, which means you can control who can book them using standard resource permissions:- Go to Settings > Resources
- Find the resources created for your locker groups (they’ll have the locker group name from Salto)
- Edit each resource to configure:
- Visibility: Control whether the resource appears in the Passport app
- Booking permissions: Set which customer types or plans can book these lockers
- Pricing: Optionally charge for locker usage (per hour, per day, etc.)
- Advance booking: Set how far in advance lockers can be reserved
- All active customers: Set “Can be booked by” to all customer types
- Specific plans only: Restrict booking to customers with certain passes or plans
- Free vs. paid: Some locker groups can be free for members, others charged for guests
Troubleshooting Lockers
Lockers not appearing in Nexudus after connection
Lockers not appearing in Nexudus after connection
-
Lockers not synced: The initial sync didn’t run or failed
- Solution: Go to Settings > Integrations > Salto and click “Sync Salto Eloxx Locker data”
-
No Eloxx lockers in Salto: Your Salto site doesn’t have Eloxx lockers configured
- Solution: Verify in Salto that you have Eloxx locker groups and lockers set up
-
Wrong site selected: The Nexudus location is connected to a different Salto site
- Solution: Verify the selected site has the Eloxx lockers you’re expecting
Customer can't see any available lockers
Customer can't see any available lockers
-
Resource not visible: The locker resource is set to hidden
- Solution: Go to Settings > Resources and ensure the locker resource has “Visible” enabled
-
No booking permission: Customer doesn’t have permission to book the locker resource
- Solution: Edit the resource and configure “Can be booked by” to include the customer’s type or plan
-
All lockers occupied: There are no available lockers in the group
- Solution: Check the floor plan to see if all lockers are assigned, or release some lockers
-
Lockers offline: All lockers in the group have lost connectivity
- Solution: Check Salto to verify locker status and connectivity
Unlock command not working
Unlock command not working
-
Locker offline: The specific locker has lost connection to Salto
- Solution: Check the locker’s battery and connectivity in Salto system
-
Not the locker owner: Someone else reserved the locker
- Solution: Customer can only unlock lockers they have reserved
-
OAuth token expired: The Salto connection needs to be refreshed
- Solution: Reconnect the Salto integration from Settings > Integrations
-
Network connectivity: Temporary network issue between Nexudus and Salto
- Solution: Retry the unlock after a few moments
Locker stuck as occupied after customer finished
Locker stuck as occupied after customer finished
-
Customer didn’t release: Customer closed the app without releasing the locker
- Solution: Admin can manually release the locker by editing the floor plan desk and removing the customer assignment
-
Release failed: The release action didn’t complete successfully
- Solution: Check the audit log for errors, then manually release as admin
New lockers added in Salto not appearing in Nexudus
New lockers added in Salto not appearing in Nexudus
- Sync not run: Nexudus doesn’t automatically detect new lockers
- Solution: Go to Settings > Integrations > Salto and click “Sync Salto Eloxx Locker data” to import the new lockers
Mobile Access Setup
For Administrators
To enable mobile access for your customers:- Ensure Salto integration is connected and configured
- Verify that access groups are properly mapped to passes, resources, and desks
- Customers will be automatically provisioned as site users in Salto when they receive access
For Customers
Customers can set up mobile access through the Nexudus Passport app:- Download the Nexudus Passport app (iOS or Android)
- Sign in with their Nexudus credentials
- Navigate to the access control section
- Connect to Salto by authorizing their account
- Their mobile key is automatically provisioned based on their Nexudus access
- Use the Salto app to unlock doors
- Real-time access updates based on passes, bookings, and contracts
- Access is automatically revoked when contracts end or passes expire
- Multiple devices can be registered per customer
Troubleshooting
Customer has an active contract but can't access doors
Customer has an active contract but can't access doors
-
Pass not mapped: The passes included in the customer’s plan are not mapped to any Salto access groups
- Solution: Go to Settings > Integrations > Salto and select an access group for the relevant passes
-
Wrong site selected: The Nexudus location is mapped to a different Salto site than where the customer’s locks are located
- Solution: Verify the selected site matches your physical location and locks
-
Access group no longer exists: The selected access group was deleted from Salto
- Solution: Select a different access group or recreate the group in Salto, then refresh the integration
-
Pass expired or inactive: The customer’s pass has expired or hasn’t started yet
- Solution: Check the customer’s passes under their profile to verify validity windows
-
Site user not created: The customer wasn’t created in Salto
- Solution: Check the Business Checkup page for integration errors, or manually trigger an update by editing and saving the customer’s profile
-
Access group permissions: The Salto access group exists but isn’t assigned to any locks
- Solution: In Salto, verify the access group includes the correct locks
-
No credentials: Customer exists in Salto but has no RFID card or mobile key
- Solution: Assign an RFID card in the customer’s Access Card ID field, or have the customer set up mobile access
-
OAuth token expired: The connection between Nexudus and Salto needs to be refreshed
- Solution: Check the integration status. If disconnected, click “Connect” again to re-authorize
Integration shows as disconnected
Integration shows as disconnected
-
OAuth token expired: Access tokens expire after a period of inactivity
- Solution: Click the “Connect” button again and re-authorize your Salto account
-
Salto account changes: Your Salto account password was changed or permissions were revoked
- Solution: Reconnect the integration by clicking “Connect” and signing in again
-
Salto platform maintenance: Temporary service disruption
- Solution: Wait a few minutes and check the Salto status page, then reconnect if needed
Check-ins not working when customers unlock doors
Check-ins not working when customers unlock doors
-
Lock not configured: The lock action is set to “Nothing”
- Solution: Go to Settings > Integrations > Salto > Presence Tracking and set the appropriate action (Check In, Check Out, or Toggle)
-
Customer identification failed: Customer’s RFID tag or email doesn’t match between systems
- Solution: Verify the customer’s Access Card ID in Nexudus matches the tag_number in Salto, or ensure their email addresses match
-
Events not being received: Webhooks from Salto aren’t reaching Nexudus
- Solution: Check with Nexudus support to verify webhook configuration is correct
-
Customer already checked in: The check-in action failed because the customer is already checked in
- Solution: This is normal behavior - check-ins only succeed when the customer’s state changes
Booking guests can't access the space
Booking guests can't access the space
-
Resource not mapped: The resource isn’t mapped to any Salto access group
- Solution: Go to Settings > Integrations > Salto > Resources and select an access group for the resource
-
Guest not created in system: Booking guest wasn’t properly registered as a contact
- Solution: Ensure the guest has a valid email address and contact record in Nexudus
-
Timing issue: Guest is trying to access before the 15-minute lead time
- Solution: Access is granted 15 minutes before the booking starts - ask the guest to wait
-
Guest has no credentials: Guest doesn’t have an RFID card or mobile access
- Solution: Assign an access card or have the guest set up mobile access through their contact profile
Mobile access not working for customers
Mobile access not working for customers
-
Customer hasn’t authorized Salto: The customer needs to connect their Salto account through Nexudus Passport
- Solution: Direct the customer to the Nexudus Passport app to authorize the Salto integration
-
Mobile key not provisioned: The customer’s mobile device isn’t registered in Salto
- Solution: Have the customer open the Salto app and complete the device registration process
-
Access not synced: The customer’s mobile app hasn’t synced recent access changes
- Solution: Ask the customer to open the Salto app and pull to refresh their access permissions
-
Offline mode: Customer is trying to unlock without prior sync
- Solution: Mobile keys work offline after initial sync, but the customer needs internet connection for the first sync
Changes to pass mappings not taking effect
Changes to pass mappings not taking effect
-
Settings not saved: Changes were made but not saved
- Solution: Click the “Save” button at the bottom of the integration settings
-
Background job delay: Access updates are processed asynchronously
- Solution: Wait a few minutes for the background job to process the changes
-
Site not selected: You changed mappings before selecting a site
- Solution: Ensure a site is selected from the dropdown, then review and save the mappings again
Visitor access not working
Visitor access not working
-
Visitor PIN codes not enabled: The feature is toggled off
- Solution: Go to Settings > Integrations > Salto and toggle “Create visitor PIN codes” to ON
-
No visitor group selected: A visitor access group hasn’t been chosen
- Solution: Select a Salto access group from the “Visitor Group” dropdown
-
Visitor hasn’t arrived yet: Access hasn’t started
- Solution: Visitor access begins at the expected arrival time - wait until then
-
Visitor access expired: Access was time-limited and has ended
- Solution: Regular visitors lose access at midnight on their arrival date. Re-register for a new visit or mark as departed and re-add
-
No credentials provisioned: Visitor doesn’t have a way to unlock doors
- Solution: Provision an RFID card or mobile key for the visitor through their contact profile
Best Practices
Access Group Organization
- Create separate access groups for different zones (e.g., “Lobby”, “Coworking Floor 1”, “Private Offices”)
- Use descriptive names that make it clear what area each group grants access to
- Document which locks belong to each group in Salto
- Review and update access group mappings when you add new locks
Pass Mapping Strategy
- Map general membership passes to broad access groups (e.g., “24/7 Access”)
- Map specialized passes to restricted areas (e.g., “Meeting Room Pass” → “Conference Rooms”)
- Use time-based passes for temporary access needs (e.g., “Day Pass” with validity window)
- Avoid mapping too many passes to the same group unless they represent the same level of access
Resource and Desk Mapping
- Map resources to the most specific access group needed (don’t over-grant access)
- Consider that booking guests will receive the same access as the resource grants
- Map desks to access groups that cover common areas plus the specific desk location
- For team billing, ensure desk access groups cover areas that team members need
Mobile Access Rollout
- Educate customers on how to set up mobile access through Nexudus Passport
- Provide clear instructions in your welcome emails and onboarding materials
- Offer RFID cards as a backup option for customers who prefer physical credentials
- Monitor adoption rates and provide support for customers who have trouble connecting
Monitoring and Maintenance
- Regularly check the Business Checkup page for integration errors
- Review access logs in Salto to ensure access is being granted and revoked properly
- Test the integration periodically with a test customer account
- Keep your Salto access groups organized and documented
- Verify the OAuth connection is active - reconnect if the integration shows as disconnected
Security Considerations
- Review who has administrator access to both Nexudus and Salto
- Audit access group assignments periodically to ensure customers have appropriate access
- Remove access immediately when customers leave or contracts are terminated
- Use mobile access for enhanced security (can be revoked instantly, no lost cards)
- Monitor check-in tracking for unusual patterns that might indicate security issues
Additional Resources
- Salto KS Documentation - Official Salto platform documentation
- Nexudus Passport App - Mobile app for customer access
- Access Control Overview - General access control concepts in Nexudus
- Pass Management - How to configure passes in Nexudus
- Resource Bookings - Managing bookable resources