Verkada Badge Management: How HTS BadgeFlow Closes the Loop Between Print and Access

For a multi-site network on Verkada Command, the badge problem is not the printer — it is the workflow around it. HTS BadgeFlow ships HID iCLASS and HID Seos credentials to any site in 3-5 business days and pairs each one to the Verkada Access credential the moment the carrier scans the package.

The badging problem is not a printer problem

Customers open the badging conversation with one of three pain points: a printer jammed on a Monday morning, lost badges that never get replaced, or badges that look slightly different at every site — all symptoms of badging treated as an IT side project instead of an operational service.

The labor is real. IT teams spend an average of 11 hours per month troubleshooting printer issues, per Gartner research published in 2023 [1]. Epson's 2023 survey of 525 IT decision-makers across Europe found that 27% of all IT downtime is printer-related, translating to more than 17 hours lost per business per day from underperforming print technology [2]. The capex is real too: entry-level direct-to-card printers from HID Fargo and Brady start at $1,000-1,500, with full lamination units reaching $4,000-5,000, plus recurring spend on YMCKO (Yellow, Magenta, Cyan, Black, and Overlay) ribbons, blanks, and software [3][4].

The lost-badge drag is hidden. A 2024 PR Newswire survey found that 38% of employees who lost or forgot their badge admitted to being late to work or meetings, and roughly 1 in 3 are ready to ditch badges for biometrics [5]. Industry benchmarks put the average replacement cost at $5-$20 per incident, with an all-in industry average of $12 per badge [6]. The HID 2026 State of Security and Identity Report found that 74% of organizations are deploying or planning mobile credentials, and 84% still run a hybrid card-plus-mobile environment; the Apple Wallet mobile-credential market is projected to grow from $2.6B in 2024 to $9.3B by 2033 at a 17.3% CAGR (compound annual growth rate) [7][8].

What "managed badging" actually means at HTS

HTS has been operating HID and Brady card printers for managed-service customers since 2019, with the same operations team, the same carrier accounts, and the same consumable supply chain. BadgeFlow is what happens when that print operation gets a customer-facing portal, an API (application programming interface), and a direct line to Verkada Access. The product surface is software. The product underneath is a working print shop with a 3-5 business day SLA (service-level agreement).

The print footprint is three nodes, sized for failover: US-East live at ~6,000 badges per month as primary, US-West live at ~3,000 per month as backup, and EU-DE planned for Q1 2027 at ~2,000 per month. Every order moves through a state machine — DRAFT, PENDING_APPROVAL, APPROVED, QUEUED_FOR_PRINT, PRINTING, SHIPPED, DELIVERED — and every transition is timestamped. US delivery is 3-5 business days; EU is 5-7 at launch. A 48-hour US express tier is available for an additional $3.00 per badge. Print sites run primary and backup with quarterly failover drills; lost packages auto-re-print and re-ship at no charge; Verkada rate limits and API degradation are absorbed by a worker queue that retries with exponential backoff and parks the order in a SYNC_PENDING state on hard failure. The physical badge still ships.

Pairing the Verkada access badge to the HRIS ID at ship

The technical heart of BadgeFlow is a single integration: pairing the physical badge to the Verkada Access credential by external_id at the moment the carrier scans the package.

Verkada's External ID is the third-party user-identity system's unique identifier — an employee ID, an HRIS (Human Resources Information System) UUID, or an email — and it is required on every user created through the API [9]. BadgeFlow sets external_id to the customer's HRIS employee_id at user creation, and the same value lives on the physical badge as both printed text and CSN (card serial number, encoded on the chip). A re-print of the same employee re-uses the same Verkada user record — no duplicates, no orphaned credentials.

On SHIPPED, a sequence of API calls fires: create the Verkada user with the customer's mapped access groups, attach the card with the CSN, activate the credential, and write an audit_events row that feeds the SOC 2 (Service Organization Control Type 2) CC6.2 (provisioning) and CC6.3 (deprovisioning) evidence pack HTS prepares for its external auditor [10]. Every step is keyed on (external_id, order_id), so a duplicate webhook or worker re-run produces the same end state. A lost-badge re-issue generates a new physical card with the same external_id; the new CSN replaces the old one in Verkada, and the old card is deactivated in the same call. Customers running Okta or Microsoft Entra ID with the Verkada SCIM (System for Cross-domain Identity Management) integration can use the SCIM-provisioned externalId field as the same join key; BadgeFlow and SCIM coexist on the same Verkada tenant without conflict [11].

A self-service portal that replaces email and spreadsheets

The portal is the same Next.js surface as the rest of the HTS Managed console. Photo upload runs face detection, checks minimum resolution (300x300 px), validates background, and crops to a standard passport aspect; a photo that fails returns a specific reason so the uploader can fix it without an IT ticket. Bulk CSV upload is the most-used feature after photo upload: the CSV template is generated from the customer's own template, so HR exports from Workday or BambooHR, drops the file, and gets a preview of 80 badges before clicking submit. 1,000-row fall starts for school districts are real.

Manager approval is configurable per customer, two-step by default, with options for auto_approve=true on trusted roles, multi-manager approval for high-privilege roles, or per-site approver routing. Approval happens in the portal, by email link, or via Slack or Microsoft Teams with a one-click approve or deny. Custom templates — logo, color palette, role color band, field set, back-side layout — are designed in the portal, reviewed in a proof email within one business day, and locked once approved; re-issue onto the same template is automatic.

What the numbers look like for a 5-site, 400-employee practice

The model assumes a five-site healthcare practice with 400 employees, 80 new hires per year, a 12% annual badge loss rate, and HID iCLASS SE credentials at $14.50 per badge.

The per-badge cost goes up — from $105 to $147 — and that is the wrong comparison. The right comparison is the total cost of running an identity program. The customer recovers $1,485 in IT time, $9,600 in manager time, $8,400 in HR time, and $15,900 in deferred capex and inventory every year — $35,385 in savings against a $16,771 sticker-price increase, or $18,614 in net annual savings. Add the $32,000 in day-one new-hire productivity (80 new hires × one day earlier × $400 per day), and the program pays for itself in year one.

Why one multi-site healthcare provider is the proof point

A multi-site healthcare provider operates 80 care centers and 150 locations across New Jersey, Pennsylvania, Indiana, and Kentucky, with 400+ providers and 2,500 total employees [12]. The HTS Managed footprint at the healthcare provider today covers 6 sites, 50 cameras, roughly 35 access-card readers, and approximately 350 active badges, with around 120 NOC (Network Operations Center) alerts per month and total MRR (monthly recurring revenue) of $6,646. BadgeFlow contributes $700 of that MRR at $2 per active badge per month, replacing the existing per-card-reader line and leaving the healthcare provider roughly flat with cleaner catalog visibility and a new self-service surface.

What changes is the workflow. HR emails HTS for new-hire badges today with no SLA on re-issue; under BadgeFlow, HR opens the portal, uploads a photo, and the badge ships in 3-5 days with a tracking number. A lost badge becomes a one-click re-issue with no per-incident charge. The Verkada Access credential, manually entered by HTS ops after the badge ships today, becomes an automatic sync on SHIPPED, paired by external_id, with a full audit_events row ready for the SOC 2 evidence pack. For a multi-site, HIPAA (Health Insurance Portability and Accountability Act)-bound, high-churn organization with patient-facing photo IDs across 150 locations, that workflow shift is the product.

Sources

[1] Gartner, IT printer maintenance benchmark, 2023. [2] Epson, State of the Market 2023 — Epson press release. [3] SecureIDBadgeSupplies, 2024 direct-to-card printer pricing. [4] HID card and consumable pricing — ID Wholesaler, IDEnhancements, IDSecurityOnline, IDCardGroup, 2024. [5] PR Newswire, employee badge survey, 2024. [6] Y Magnetics, lost-badge replacement cost benchmarks, 2024. [7] HID 2026 State of Security and Identity Report, via kbi.media and asmideast.com, May-June 2026. [8] Growth Market Reports, Mobile Credential in Apple Wallet market, 2024. [9] Verkada API Reference — External ID Introduction, Create User, Access Credentials Guide. [10] AICPA, SOC 2 Trust Services Criteria CC6.2 and CC6.3, 2022 revision. [11] Verkada, SCIM-Synced Access Credentials, verkada.com/updates, 2024. [12] PitchBook, 2025; Partners Group press release, 2024.

If you are running Verkada Command across multiple sites and want to talk through the physical side of identity, we are here to help.

Harris Technology Services (HTS) · https://www.hts.pro · Support: support@hts.pro