--- title: "Direct Coupling vs. Key2XS Mediation: Two Paths to Managing Physical Key Systems with IAM" description: Direct IAM coupling or Key2XS mediation? Two architectures for managing physical key systems like CLIQ and iLOQ from your IAM, compared. image: https://key2xs.com/hubfs/key2xsplatform.png --- [![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) ![Key2XS](https://key2xs.com/hubfs/img/logo-blue-horizontal.svg)](https://key2xs.com/?hsLang=nl) Why Governance? [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) Analyst recognition [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) Industries [Government](https://key2xs.com/sectors/government?hsLang=nl) [Utilities](https://key2xs.com/sectors/utilities?hsLang=nl) [Water management](https://key2xs.com/sectors/water-management?hsLang=nl) [Transport](https://key2xs.com/sectors/transport?hsLang=nl) [Telecom](https://key2xs.com/sectors/telecom?hsLang=nl) Platform [Product](https://key2xs.com/products?hsLang=nl) [How it works](https://key2xs.com/?hsLang=nl#how-it-works) [Integrations](https://key2xs.com/integrations?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) Partners Technology partners [SailPoint](https://key2xs.com/sailpoint-partnership?hsLang=nl) [One Identity](https://key2xs.com/partners/one-identity?hsLang=nl) [Microsoft Entra ID](https://key2xs.com/partners/entra-id?hsLang=nl) [Okta](https://key2xs.com/partners/okta?hsLang=nl) [OpenText](https://key2xs.com/partners/opentext?hsLang=nl) [iLOQ](https://key2xs.com/partners/iloq?hsLang=nl) [ASSA ABLOY](https://key2xs.com/partners/assa-abloy?hsLang=nl) Resell & Implementation partners [Hanab](https://key2xs.com/partners/hanab?hsLang=nl) Resources [Resource center](https://key2xs.com/resources?hsLang=nl) [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) [Events](https://key2xs.com/events?hsLang=nl) Meet us at Navigate [Navigate Austin · Oct 5-8](https://key2xs.com/events/sailpoint-navigate-austin?hsLang=nl) [Navigate London · Nov 2-4](https://key2xs.com/events/sailpoint-navigate-london?hsLang=nl) [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) [FAQ](https://key2xs.com/?hsLang=nl#faq) [News](https://key2xs.com/news-archive?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [← The Key2XS journal](https://key2xs.com/news-archive?hsLang=nl) News # Direct Coupling vs. Key2XS Mediation: Two Paths to Managing Physical Key Systems with IAM Sep 15, 2025 · 3 min read · by the Key2XS team ![Direct Coupling vs. Key2XS Mediation: Two Paths to Managing Physical Key Systems with IAM](https://key2xs.com/hubfs/key2xsplatform.png) **In short:** You can connect IAM to key systems like [CLIQ](https://key2xs.com/integrations/assa-abloy-cliq?hsLang=nl) or [iLOQ](https://key2xs.com/integrations/iloq?hsLang=nl) by direct coupling or through the Key2XS platform. Direct coupling means custom integration per system pair and migration pain later; Key2XS mediation adds a governance layer that survives IAM or lock-system changes, with one audit trail.   As organizations modernize their identity and access management (IAM) environments, many are also seeking to extend the same governance and compliance principles to their physical access controls particularly electronic key systems such as [ASSA ABLOY CLIQ](https://www.assaabloy.com/nl/nl/solutions/topics/digital-access-solutions/cliq) or [iLOQ](http://www.iloq.com). There are two primary architectural models for doing this: 1. **Direct coupling of IAM to a key system** 2. **IAM integration via the Key2XS platform** While both approaches aim to unify digital and physical access, they differ in scalability, security, and compliance outcomes.   ## **1. Direct Coupling: Point-to-Point Integration** In a direct coupling model, the IAM platform connects straight into the key system using vendor APIs. This seems straightforward but comes with significant trade-offs: - **One-off engineering** Each IAM vendor (e.g., [Entra ID](https://key2xs.com/integrations/entra-id-iloq?hsLang=nl), [SailPoint](http://www.sailpoint.com), [Okta](http://www.okta.com)) must build and maintain a custom connector to the specific key system. Changes in either product require ongoing adjustments. - **Limited interoperability** Direct integrations often only support a single key system. If an organization uses multiple systems (e.g., CLIQ in one region, iLOQ in another), the IAM cannot easily orchestrate both. - **Rigid logic** IAM policies must be translated directly into key system logic, often resulting in limited flexibility for Just-in-Time (JIT) provisioning, temporary access, or emergency overrides. - **Compliance blind spots** Most IAM solutions are designed for digital entitlements, not for handling operational technology (OT) needs such as audit trails of key usage, cylinder movements, or sabotage detection. Direct coupling is often the quickest route for small deployments but struggles in complex, multi-vendor, or regulated environments.   ## **2. Key2XS Mediation: A Bridge Between IAM and Key Systems** The Key2XS platform takes a different approach: it **sits between IAM and the physical key infrastructure**, acting as a universal translator and governance layer. - **Multi-vendor abstraction** IAM only needs to integrate once with Key2XS. The platform then handles connections to multiple key systems (CLIQ, iLOQ, others) across sites and countries. - **AI-driven key management** Key2XS automatically generates and maintains a keyplan based on IAM roles, organizational data, and uploaded infrastructure layouts. This reduces human error and eliminates the manual mapping of people to cylinders. - **Advanced governance** Key2XS enriches IAM data with operational context such as audit trails, cylinder configurations, and contractor usage providing the CISO and CRO with real-time visibility into both digital and physical entitlements. - **Resilience and compliance** By embedding CER and [NIS2](https://key2xs.com/nis2-directive?hsLang=nl) reporting features, Key2XS helps critical entities demonstrate regulatory compliance, document incidents, and prove “least privilege” across IT + OT. - **Lifecycle automation** Keys can be provisioned Just-in-Time, revoked automatically when roles change, or reprogrammed remotely in case of sabotage or theft all without manual intervention in the key system console.   ## **3. Why the Difference Matters** | Aspect | Direct Coupling | IAM via Key2XS | | --- | --- | --- | | Integration | Custom, brittle | Single, standardized | | Vendors supported | Typically one | Multiple (CLIQ, iLOQ, etc.) | | Governance | Limited | Full audit + compliance | | AI & automation | None | Built-in AI recommendations | | Resilience | Dependent on single connector | Platform designed for hybrid IT/OT resilience | | CER/NIS2 readiness | Manual reporting | Automated compliance features | In short: **Direct coupling integrates a key system. Key2XS integrates access governance.**   ## **Conclusion ![75D1AC0B-B8C5-497E-B9C0-8528409C0A30](https://key2xs.com/hs-fs/hubfs/75D1AC0B-B8C5-497E-B9C0-8528409C0A30.png?width=39&height=59&name=75D1AC0B-B8C5-497E-B9C0-8528409C0A30.png)** As critical infrastructure operators prepare for new regulatory obligations under CER and NIS2, extending IAM into the physical world is no longer optional. While direct integration offers a basic bridge, it does not scale in complex or regulated environments. By contrast, the Key2XS platform was built to converge digital and physical access at enterprise scale embedding governance, compliance, and AI-driven automation into the core. This makes the difference between “just connecting a system” and **achieving true resilience across IT and OT access**. ![](https://key2xs.com/hubfs/1587550138006.jpeg)![](https://key2xs.com/hubfs/img/niels-bakker.png)![](https://key2xs.com/hubfs/1746630921693.jpeg)![](https://key2xs.com/hubfs/1696359051569.jpeg) **Written by the Key2XS team** Key2XS is founder-run. Questions about this piece land with the people who built the platform. [Talk to us](https://key2xs.com/contact?hsLang=nl). ## Keep reading [![](https://key2xs.com/hubfs/237024142_m.png) **Seamless Transitions: How Key2XS Simplifies Migration Between IAM and Locking Systems**Nov 03, 2025](https://key2xs.com/news/seamless-transitions-how-key2xs-simplifies-migration-between-iam-and-locking-systems?hsLang=nl) [![](https://key2xs.com/hubfs/19294161_m.png) **Keeping Rotterdam’s Refineries Safe with Key2XS and Proving CER Compliance**Sep 08, 2025](https://key2xs.com/news/keeping-rotterdams-refineries-safe-with-key2xs-and-proving-cer-compliance?hsLang=nl) [![](https://key2xs.com/hubfs/218277230_m.png) **Unlocking Efficiency and Compliance: The Benefits of Key2XS in a Multinational Environment**Sep 29, 2025](https://key2xs.com/news/unlocking-efficiency-and-compliance-the-benefits-of-key2xs-in-a-multinational-environment?hsLang=nl) ## Govern the keys you already have See identity, policy and physical keys in one 30-minute demo, scoped to your estate. [Book a demo](https://key2xs.com/contact?hsLang=nl) [More in the journal](https://key2xs.com/news-archive?hsLang=nl) ### Contact us [Wilhelmina van Pruisenweg 104, 2595 AN Den Haag](https://maps.google.com/?q=Wilhelmina+van+Pruisenweg+104+Den+Haag) Kraanspoor 50, 1033 SE Amsterdam, The Netherlands [info@key2xs.com](mailto:info@key2xs.com) [+31(0)70 2045180](tel:+31(0)702045180) ### Platform - [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) - [Product](https://key2xs.com/products?hsLang=nl) - [Integrations](https://key2xs.com/integrations?hsLang=nl) - [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) ### Compliance - [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) - [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) - [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) ### Company - [SailPoint partnership](https://key2xs.com/sailpoint-partnership?hsLang=nl) - [Resource center](https://key2xs.com/resources?hsLang=nl) - [Events](https://key2xs.com/events?hsLang=nl) - [News](https://key2xs.com/news-archive?hsLang=nl) - [Contact](https://key2xs.com/contact?hsLang=nl) [![Penetration tested and verified by Sekurno](https://key2xs.com/hubfs/img/badges/sekurno-pentest-badge-white.svg)](https://www.sekurno.com/verified/key2xs) [![KuppingerCole Analysts Rising Star 2026 badge for Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg)](https://key2xs.com/analyst-recognition?hsLang=nl) --- ![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) Key2XS, pronounced “key to access” © 2026 Key2XS B.V. All rights reserved [Privacy](https://key2xs.com/privacy-statement?hsLang=nl) Cookie Preferences Patent Pending Nr: 2040721 & 2041284 Key2XS & ActiveAuth are registered trademarks of Key2XS Assets B.V. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Key2XS", "url" : "https://key2xs.com/news/author/key2xs-2" }, "dateModified" : "2025-09-16T07:20:55.012Z", "datePublished" : "2025-09-15T07:00:00.000Z", "headline" : "Direct Coupling vs. Key2XS Mediation: Two Paths to Managing Physical Key Systems with IAM", "image" : [ "https://key2xs.com/hubfs/key2xsplatform.png" ], "mainEntityOfPage" : { "@id" : "https://key2xs.com/news/direct-coupling-vs.-key2xs-mediation-two-paths-to-managing-physical-key-systems-with-iam", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://key2xs.com/hubfs/logo%20blue.svg" }, "name" : "Key2XS B.V." } } ```