How somebody proves who they are at the panel

Five credentials the panel can ask for, plus the option of asking for nothing. What each one needs in place first, and why two panels in the same building can ask for different things.

Updated 18 Aug 2026

Before a panel books a room, checks somebody in, or lets them out early, it wants to know who is standing there. Five credentials can answer that, and a sixth option says not to ask.

When more than one is available, the panel offers Choose authentication method first. With exactly one it goes straight into it, and with none it refuses the action outright.

Four methods on this panel, including the one that asks for nothing.

Four methods on this panel, including the one that asks for nothing.

The five credentials

MethodWhat the person doesWhat has to exist first
Face identification (BETA)Looks at the panelA camera on the panel hardware, and up to three photos uploaded in advance by each person
QR codeScans the code on the panel with the Offision appThe app, signed in. The code rotates and expires on a visible countdown, with Generate new QR code underneath it
Staff cardHolds their card near the readerA card reader on the panel and a card registered to them — see Check in by tapping a staff card
User passcodePicks their name, then types a 4–8 digit passcodeThe passcode, which each person sets themselves in the user app. Nobody can set it for them
Booking pinTypes the pin from the bookingAn existing booking to act on — which is why it never appears on a walk-in

The QR code is the one people get backwards. The panel shows the code and the person scans it with their phone; the panel is not reading a code off their screen. Whether it renders Black & white or Colorful is a setting beside the method itself.

User passcode always takes two steps, because the passcode alone does not say whose it is. Where the action has a booking attached the panel already knows the candidates; on a walk-in it has to search everybody.

Name first, passcode second — shown here with Mask part of user name from search list on.

Name first, passcode second — shown here with Mask part of user name from search list on.

Asking for nothing: Allow anonymous

Allow anonymous adds a Use directly tile. Taking it creates the booking with no organiser at all — the room is held, and nothing records who took it.

Two limits are worth knowing before turning it on:

  • It only ever appears on booking-type actions — walking in, booking ahead from the panel, taking a seat. Checking in, checking out, extending and cancelling always ask for a credential, because those act on somebody else’s booking.
  • It lives only on a panel configuration. There is no organisation-wide equivalent, which is deliberate: anonymous suits a phone booth or a touchdown desk and suits almost nothing else.

Where the methods are set

Two screens, and the second overrides the first.

Check-in method sets the default for the whole organisation — QR code, Staff card, User passcode, Booking pin and Face identification, with Enable at least one of the following check-in methods on the device. Any panel with no override of its own follows it. See Checking in at the booking panel, which shows that screen.

Open Check-in method

Override the system user identification settings, on a panel configuration’s Check-in method page, is what lets panels differ — “By overriding the system settings, each device can be configured with a different identification method.” A panel in a secure area can insist on a staff card while the one in the open-plan corner accepts a passcode.

Open Panel configurations
The override, with Allow anonymous underneath the methods it applies to.

The override, with Allow anonymous underneath the methods it applies to.

Two things do not follow the override:

  • Booking pin is not on the per-configuration list at all. A panel takes it from the organisation-wide screen whatever its configuration says.
  • Face identification still needs a camera. Turning it on for a panel that has none simply leaves the tile off that panel.

What this does not control

  • Whether the person is allowed to do the thing. Identifying successfully and being permitted to book, check in or extend are separate questions — the second is the resource’s policy and their permissions.
  • The passcode itself. Each person sets and changes it in the user app.
  • Opening the door. Where a panel drives a lock, unlocking rides along with the action; a panel with no access hardware still identifies people perfectly well.
  • Which buttons the panel offers. That is the configuration’s Function page — see Let somebody take a free room at the panel.