RTNConnect System Integration Solution
RTNConnect integrates Real Time Networks' AssetTracer and KeyTracer systems with Microsoft Entra ID through the Microsoft Graph API. RTNConnect uses Entra ID security group memberships to decide who is provisioned and with which role. Through group and attribute mapping, Entra ID administrators manage users, roles, group assignments, and credentials in AssetTracer and KeyTracer from the directory they already use.
Key Product Features
- Direct integration with Microsoft Entra ID through the Microsoft Graph API.
- Maps Entra ID security groups, including nested groups, to AssetTracer and KeyTracer roles and user groups.
- Syncs users, credentials, and group assignments through Entra ID group and attribute mapping.
- Asset and key access is disabled promptly for users disabled in Entra ID.
- Custom scripting for tailored integrations, including hybrid users synced from on-premises Active Directory.
- Optional SAML Single Sign-On to AssetTracer and KeyTracer using Entra ID accounts.
System Requirements
- Microsoft Entra ID tenant with access to the Microsoft Graph API
- App registration with read-only Microsoft Graph permissions
- Client certificate or client secret for application authentication
Core Capabilities
-
Automatic Management and Updates
Map Entra ID security groups to Real Time Networks roles and user groups, and changes made in Entra ID flow to every connected AssetTracer and KeyTracer system on the next sync. New staff added to a mapped group, including nested groups, receive the right access to items and keys with no added administration. When a person is disabled in Entra ID or removed from a mapped group, access is removed on the next sync, closing potential access loopholes.
-
Enhanced Insight into User Behavior
As user information flows from Entra ID into AssetTracer and KeyTracer, every transaction is tied to a directory-managed identity. Combined with the audit trail in each system, administrators get a clear record of who accessed which asset and when. That record supports usage analysis, misuse investigations, and accountability across the organization.
-
Flexible and Customizable
Custom dynamic scripts give administrators control over how Entra ID data is synced. They choose which user attributes are read, such as name, email, mobile, and department, and how each maps into Real Time Networks systems. Card, PIN, and barcode credentials can be read from any attribute, and KeyTracer web users are supported for hybrid users synced from on-premises Active Directory.
-
Control the Frequency of Updates
RTNConnect runs as a background service on Windows or Linux. Data syncs can be triggered on demand or at set intervals, so the integration fits your existing operational processes. RTNConnect handles Microsoft Graph paging and throttling automatically, keeping large directories in sync without manual intervention.
-
Security and Convenience
RTNConnect connects to Entra ID as a registered application with read-only Microsoft Graph permissions and authenticates with a client certificate or client secret. Nothing is written back to your directory, and secrets are stored encrypted and never written to logs. The optional SAML Single Sign-On module lets users log in to AssetTracer and KeyTracer with the Entra ID credentials they already use, reducing password fatigue.
-
System Scalability
Users can be added or removed in bulk by changing their Entra ID group membership, and department details flow through from the directory. Access assignments are made without configuring each user and system separately, which supports multi-site and enterprise deployments and makes it easier to grow, reorganize, or migrate systems.
