A Smarter Path Forward: Convergence and Open Edge Computing

Converging physical and digital identity while deploying mobile credentials and edge intelligence enables organizations to modernize access control without expensive rip-and-replace overhauls.

• By Jim Dearing
• Jul 28, 2026

Access control modernization sounds simple until you consider the diversity of the installed base. Most organizations are running a mix of older readers, newer platforms, physical credentials, mobile options and building systems that all must keep working while the environment evolves.

Several developments are driving the current evolution. Mobile credentials continue to gain momentum. Organizations are taking a closer look at how identity is managed across physical and digital environments, and biometrics are beginning to move beyond niche use cases. At the same time, access control infrastructure itself is becoming more flexible, more customizable and more open to innovation at the edge.

Converging Physical and Digital Identity

One of the most significant changes underway is the convergence of physical and logical access. For years, organizations have managed these domains separately. An employee might use a badge to enter a building, a password to log into a workstation and another to access applications. Each system operates independently, with its own lifecycle and management overhead.

The 2026 State of Security and Identity Report found that 73% of respondents ranked identity management as their top strategic trend. Additionally, 75% of organizations had already deployed or were evaluating converged physical and digital identity solutions, while 52% cited the complexity of managing fragmented identity systems as their primary challenge.

As organizations face more sophisticated threats and tighter compliance requirements, there is growing interest in unifying how identity is managed across environments.

A single credential that supports both physical and logical access offers a tangible way forward. It simplifies provisioning and revocation, reduces the number of credentials users must manage and provides more consistent visibility into how access is used. It also aligns with a broader move toward stronger, phishing-resistant authentication methods as organizations look for alternatives to traditional passwords.

This convergence will take time as it builds on existing credential infrastructure and expands, often starting with high-value use cases such as workstation login or privileged access. The crucial point is that access control is now part of that conversation, rather than operating in isolation.

Mobile Access and the Reality of Migration

Mobile credentials are quickly becoming a standard in access control as organizations look for more flexible and efficient ways to manage security. The ability to issue, update and revoke credentials digitally give security teams far greater control than traditional physical cards, while also meeting growing user expectations for mobile-first experiences.

HID’s 2026 State of Security and Identity Report shows this shift is already well underway: 74% of organizations have deployed or plan to deploy mobile credentials. At the same time, most organizations are still operating in hybrid environments, using both mobile and physical credentials during the transition.

One of the biggest misconceptions around mobile adoption is that it requires a complete reader replacement project. For organizations managing thousands of doors, that assumption can make migration seem expensive and disruptive. In practice, many readers installed in recent years were designed to support emerging credential technologies and can enable mobile access through software updates rather than hardware replacement.

Advances in device connectivity and standards such as Open Supervised Device Protocol (OSDP) are making this transition even easier. Instead of approaching mobile access as a large-scale rip-and-replace initiative, organizations can evaluate their existing infrastructure, identify compatible readers, and activate mobile capabilities gradually. In many cases, updates can even be deployed remotely, reducing both cost and operational disruption while creating a more practical path to adoption.

Biometrics Move into the Mainstream

Biometric authentication has long had a place in physical access control, typically in areas that require an added layer of security. Areas such as server rooms, research labs and controlled storage areas have historically relied on fingerprint readers to offer multi-factor authentication. The 2026 report shows biometrics gaining momentum, with 45% of respondents viewing biometric technology as a strategic priority, 34% already deployed and another 23% planning implementation.

Privacy is still a serious consideration, with 67% reporting ethical or privacy concerns around biometric use. That tension is why deployment strategy, transparency and proper safeguards are as important as the technology itself. Even so, biometrics are moving beyond their traditional role as a secondary factor. In some cases, they are becoming a primary method of authentication, especially outside North America and Europe.

As biometric options expand, they also contribute to a broader diversification of credential types. Cards, mobile devices, digital identity documents and biometrics are all becoming part of the same ecosystem. Access control systems must support variety without adding complexity.

Opening the Platform at the Edge

Customers increasingly want access control systems that can be customized around their own operations. They want to integrate new devices, connect access control with building systems and make better use of data already stored in legacy infrastructure. That demand is pushing more intelligence and flexibility to the controller level.

One of the most important new developments is the ability to run embedded applications directly on access controllers. This allows approved software and integrations to operate at the edge, closer to the door and the devices generating the data, rather than relying entirely on upstream systems.

This changes how innovation can happen in access control. Organizations and technology partners can create new functionality for specific use cases, from building management optimization to device integration and access event handling, while preserving the core access control infrastructure already in place.

It also reinforces the value of open architecture. A controller platform that supports secure third-party development gives organizations greater flexibility over time, allowing them to introduce new capabilities, integrate additional systems and adapt to changing operational requirements as their needs evolve.

A More Flexible Future

The common thread across these trends is flexibility. Access control is becoming more integrated with IT infrastructure and more adaptable to new forms of authentication.

For organizations, modernization is no longer about replacing everything at once. It is about building existing infrastructure, extending capabilities where possible and creating a platform that can evolve over time. The systems that will deliver the most value are those designed to support gradual change, integrate across environments and adapt as security, operational and user requirements continue to evolve.

This article originally appeared in the July/August 2026 issue of Security Today.