Setting up the Guest Account for Archibus Workplace

By default, Guest account is enabled. This means that users and visitors can access Archibus Workplace by selecting the "Sign in as Guest" option on a lobby kiosk, conference room kiosk, or from the Workplace URL. To disable the Guest account:

  1. Delete the GUEST user in the afm_users table.
  2. Set the AbSystemAdministration-GuestAccountPermitted parameter to false. This hides the “Sign in as Guest” button on login forms.

Review the following table to understand the security implications of the Guest account.

Option Use case System administration tasks Security Implication
Visitors are not trusted No access to the system by visitors whatsoever

Set up SAML authentication.

Delete the Guest user and set the parameter, as described above.

Print and use QR codes, if desired.

Do not use the kiosk mode for guests.

No security implications.
Visitors are trusted

Visitors can use kiosks in the lobby, as it is behind a security checkpoint.

Enable the Guest account

Do not print and use QR codes

When they use the Employee Locator, the list of employees is accessible to those visitors who can physically access the kiosk.
Visitors can use kiosks outside conference rooms.

Enable the Guest user.

Do not print and use QR codes.

When they use the Room Reservations feature to add attendees, the list of employees is accessible to those visitors who can physically access the kiosk.

Visitors can use QR codes

Visitors can use of QR codes

Enable the Guest user.

Print and use QR codes

When they use the Room Reservations feature to add attendees, the list of employees is accessible to those visitors who can scan the QR code.

Visitors can create service request anonymously.

Visitors can access the application when they are outside the facility