Support
Solution area · Property & Facility

Hundreds of devices.
Dozens of tenants.
One platform.

A property company's network looks nothing like a regular office Wi-Fi. The day-to-day work is running the property's IoT and OT — access readers, ventilation, alarms, cameras, cleaning robots, EV chargers, sensors. Each fleet a Group. Each vendor managing their own.

Layered on top: the property company's own internal Wi-Fi for its employees, and the multi-tenant networks where dozens — sometimes hundreds — of tenant companies share the same physical infrastructure. EntryPoint handles all of it, and delegates day-to-day work to the people who actually own each piece.

Audiences Operations · Tenants · Visitors
Methods 802.1X · iPSK · MAB · guest
Identity Local · Entra ID · Self-Service
Operations Delegated · audited
Book a demo Tour the platform
The model

Running the property's IoT/OT is the day job.
Everything else scales out from there.

A property company's primary network workload is the equipment that keeps the building running — access readers, ventilation, alarms, cameras, cleaning robots, EV chargers, environmental sensors. Hundreds of devices per building, dozens of contractors maintaining them. Each fleet a Group in EntryPoint, each vendor self-serving their own MACs.

On top of that, the property company has its own internal Wi-Fi for its employees, and — in flexible-workspace estates — multi-tenant networks where many companies share the same physical infrastructure. The platform doesn't care how many audiences you add. Each one becomes another Group. Each owner manages their own slice via Self-Service.

Audiences, one platform

Operations first.
Internal, tenants and mall visitors on top.

Running the property's IoT/OT is where the daily work lives. Internal company Wi-Fi, co-working tenants and shopping-mall visitors all scale out from the same platform.

Property operations Access readers · ventilation · cameras · sensors
01 · Property operations

The day-to-day network: every piece of property tech.

Access control, ventilation, alarms, cameras, cleaning robots, EV chargers, sensors.

This is where most of a property company's network work actually happens. Hundreds, often thousands of devices per building: badge readers, ventilation controls, alarm panels, surveillance cameras, cleaning robots, EV chargers, environmental sensors. Mostly wired, some wireless. Each fleet authenticates to its own Group on EntryPoint and lands in the right VLAN. The vendor that installed and maintains a fleet manages its own MACs through Self-Service — no IT ticket per new sensor.

  • 802.1X EAP-TLS where supported, MAB / iPSK fallback for headless gear.
  • Per-Group VLAN / ACL applied at every authentication.
  • Vendor Self-Service: each contractor owns their own MAC list and PSK rotation.
  • Property managers see only their own buildings' fleets — never the whole estate.
  • Scales to thousands of devices per property without scaling IT.
Built on EntryPointEndpoint Manager Read more →
Internal company Employees, IT, contractors on 802.1X
02 · The property company itself

Dot1x for the team that runs the property.

Property managers, IT, contractors — the company's own employees on certified Wi-Fi.

The property company has its own employees, IT staff and field-service contractors. They get the same enterprise-grade access as any other business: EAP-TLS with certificates from the corporate PKI, Microsoft Entra ID for group lifecycle, Personal PEAP for BYOD. Same EntryPoint platform that runs the building, with its own dedicated Groups. The property company's own visitors come in through Sign In — a Meeting Host invite from the host employee, no IT involvement.

  • EAP-TLS on managed laptops via the corporate PKI.
  • Microsoft Entra ID integration for group lifecycle (add to group → on the Wi-Fi).
  • Personal PEAP via Self-Service for BYOD and field contractors.
  • MAB fallback for headless gear inside the same admin.
  • Guest Wi-Fi for visitors via Sign In · Meeting Host invites per employee.
Built on EntryPoint Read more →
Co-working Hundreds of tenants, one shared network
03 · Co-working & multi-tenant

One Wi-Fi, hundreds of tenant companies.

Microsegmentation that scales out, not just up.

The story flexible-workspace operators ask about first: dozens or hundreds of tenant companies sharing the same physical Wi-Fi, each needing their own private network. Each tenant becomes a Group in EntryPoint. iPSK identifies the tenant company at association time and places them in their own VLAN. On top: every tenant can use Sign In to host their own visitors — Meeting Host invites, conference IDs for larger groups, all branded to the tenant. Each tenant's admin manages their own employees, devices and visitors through Self-Service — no calls to building IT.

  • Per-tenant Group on shared SSIDs — hundreds of companies on one platform.
  • iPSK or 802.1X identifies the tenant at association time.
  • Tenant admins Self-Serve their own Group — own MACs, own users, own audit.
  • Guest Wi-Fi per tenant via Sign In · Meeting Host + conference IDs for events.
  • Every tenant fully isolated. Each gets their own audit log scoped to their Group.
  • Scales to the entire co-working portfolio, not just one floor.
Built on EntryPoint Read more →
Mall visitors Click-to-Connect or email for loyalty
04 · Shopping malls & retail venues

Mall Wi-Fi that builds a customer list.

Click-to-connect for speed. Email for loyalty.

Many property companies also run shopping mall and retail-venue portfolios. Visitor Wi-Fi here isn't just connectivity — it's a marketing channel. Sign In offers two access patterns side by side: Click-to-Connect for the frictionless guest session most visitors want, and email Self-Provision when the mall operator wants verified contacts in exchange for free Wi-Fi. The mall's loyalty list grows from each session.

  • Click-to-Connect for instant guest sessions — branded, no form.
  • Email Self-Provision for verified contacts and opt-in to mall newsletters.
  • Per-mall branding on the captive portal across the portfolio.
  • Session analytics: foot traffic, repeat visits, time on Wi-Fi.
  • Same audit log and admin as the rest of the property portfolio.
Built on Read more →
Co-living & multi-dwelling

One Wi-Fi name.
Every apartment a private network.

EasyPSK gives each apartment, studio or unit its own per-tenant PSK on a shared SSID. The resident sees a private Wi-Fi inside a shared building. Their phone, Apple TV, EV charger and smart speaker share one identity — but stay isolated from the next apartment.

And the coverage isn't just the apartment. The same identity follows the resident through every part of the property the network reaches: the garage where the Tesla charges, the lobby, the laundry, the common areas. One PSK, one home.

  • Per-apartment PSK on a shared SSID — apartment-level isolation
  • One identity across the whole property — garage, common areas, the unit itself
  • QR-code onboarding at move-in. Staff hand it out; residents scan and connect
  • Property staff manage their own residents through Self-Service — no IT ticket
Explore EasyPSK →
In production

What it looks like
when hundreds of companies share one network.

Four views from the same co-working entrypoint: the tenant Groups, the live authentication log, the per-Group attribute profiles, and the per-session trace. Add another tenant, add another Group — the platform scales out cleanly.

Groups80
Users1 210
Devices3 448
Online2 612
NameDevicesMembersDescription
Acme Innovations293Floor 3 · Wing A
Lumen Studio277Floor 5 · Lab
Forward Analytics62Floor 2 · Hot-desks
Apex Consulting401Floor 4 · Suite B
Northwind Tech41Floor 1 · Pod 6
Tenants as Groups

Every company is a Group, however many you have.

Each company on the network — vendor fleets, co-working tenants, mall operators, internal teams — becomes a Group in EntryPoint. The list grows with the portfolio. Whether you have 4 Groups or 400, the platform handles them the same way.

  • Each tenant scoped to its own Group with its own Self-Service portal
  • Group-level audit log and per-Group policy
  • Add a Group in seconds — no platform redesign
Activity, identified

Every session attributed to a Group.

The authentication log records every device that connects to any tenant network. Reason field is the tenant Group, identity is the MAC, duration is the round-trip. One log across every audience, searchable in real time.

  • Real-time view across the entire entrypoint — no batch jobs
  • Reason is always a named Group, never an anonymous source
  • Filter by status, type, time window, identity
Requests14 728
Authorized14 721
Denied7
Latency168ms
TimeStatusIdentityReasonDuration
21:09:10● AUTH3a:44:5c:7d:bd:b0Acme Innovations249 ms
21:08:34● AUTHe4:4e:2d:d3:2b:d1Lumen Studio226 ms
21:08:05● AUTHe4:4e:2d:d3:2a:71Forward Analytics229 ms
21:07:41● AUTHa4:30:7a:62:06:e7Apex Consulting227 ms
21:04:09● AUTH96:b4:91:c3:db:d2Bright Hive Labs220 ms
NameDescriptionAttributes
access-controlBadge readers across the estateTunnel-Private-Group-ID · 50
ventilationHVAC controllersTunnel-Private-Group-ID · 9
camerasSurveillance camerasTunnel-Private-Group-ID · 15
ev-chargersEV charging stationsTunnel-Private-Group-ID · 30
alarmsAlarm panels & sensorsTunnel-Private-Group-ID · 33
digital-signageLobby + tenant displaysTunnel-Private-Group-ID · 25
iot-sensorsEnvironment / occupancyTunnel-Private-Group-ID · 101
Segmentation per Group

Profiles define what each Group receives.

Each Group has its own attribute profile — VLAN ID, Tunnel-Type, ACL rules. RADIUS sends these back at every authentication so devices land on the right segment automatically. Configure the profile once; every device in that Group inherits it.

  • Per-Group RADIUS attributes — no per-device config
  • VLAN, Tunnel-Type, Tunnel-Private-Group-ID, ACL — whatever your network demands
  • Update the profile; the next authentication picks up the change
Per-session trace

Every decision, every step, recorded.

When something needs explaining, the platform already has the answer. Each session has a per-event timeline: request received, group resolved, profile applied, decision made. Latency per step, request_id for tickets, full payload viewable inline.

  • Click any session for the full trace and timing breakdown
  • request_id ties the trace to your downstream logs and ticketing
  • Identity, network and payload visible side-by-side
21:09:10 IPSK ● AUTHORIZED
Authorized · Group Acme Innovations
Timeline 249 ms total
  • 10.192 Authentication request received
  • 10.311+119 ms Resolved IPSK group for device groupName = Acme Innovations
  • 10.385+74 ms Applied attribute profiles
  • 10.413+28 ms Approved
Delegated administration

IT runs the platform.
The building runs itself.

The biggest operational win in real estate isn't a feature — it's the org chart. EntryPoint, EasyPSK and Sign In all expose Self-Service portals scoped to one Group. The vendor that installed the access readers rotates their own PSKs. The property manager whitelists the new ventilation fleet. The tenant admin onboards their new employee. IT stops being the bottleneck.

Who does what
  • IT / platform owner Platform · Groups · policy templates · audit
  • Property management Their own building's IoT/OT fleet · day-to-day onboarding
  • Vendors & contractors Their own iPSK Group · their own MACs · install + maintain
  • Tenant admin Their tenant Group · their employees · their devices
  • Care staff (co-living) EasyPSK keys per apartment · residents at move-in
  • Visitors Self-serve via captive portal — never call reception.
The platform

Four modules. One platform. Use what you need.

EntryPoint

RADIUS-as-a-Service · EAP-TLS · iPSK · MAB · delegated Groups

Explore →

EasyPSK

Per-unit PSK on Cisco networks · residential and co-living

Explore →

Sign In

Captive portal for mall visitors · Click-to-Connect · email loyalty

Explore →

Endpoint Manager

Delegated administration of Cisco ISE groups · for ISE-based estates

Explore →
Real Estate · operations · internal · co-working · malls

One platform for every network you run.

Talk to us about delegating the property's IoT and OT to your vendors, running your internal Wi-Fi, scaling co-working to many tenant companies, and turning mall visitor Wi-Fi into a loyalty channel. 30 minutes, and some slides.

Book a demoTour the platform