A system for controlling access by individuals to an enclosed area, comprising: a computer platform physically located at the enclosed area, the computer platform comprising a processor; and an access controller embodied on a computer-readable storage medium, the access controller comprising machine instructions that when executed by the processor, causes the processor at least to: configure the system to: receive credential and policy directory information, from a remote credential and policy directory, to allow self-provisioning of the access controller through periodic, automated query of the credential and policy directory by the access controller; receive credential and policy information from the credential and policy directory for one or more individuals who may require access to the enclosed area, and store in a local cache accessible by the processor, the received credential and policy information of the credential and policy directory and the credential and policy information of the one or more individuals; periodically request a credential and policy information update from the credential and policy directory; receive, at the processor, the credential and policy information update in response to the periodic request; update the local cache based on the credential and policy information update; receive an access request to allow an individual access to the enclosed area, physical entry by the individual to the enclosed area being controlled by a door system in communication with the access controller; compare the access request to the credential and policy information in the local cache; when the comparison indicates a match, grant the individual access to the enclosed area; determine if an entry signal corresponding to the individual has originated from the door system; and deny log on to any computer within the enclosed area by the individual in absence of the entry signal. a computer platform physically located at the enclosed area, the computer platform comprising a processor; and an access controller embodied on a computer-readable storage medium, the access controller comprising machine instructions that when executed by the processor, causes the processor at least to: configure the system to: receive credential and policy directory information, from a remote credential and policy directory, to allow self-provisioning of the access controller through periodic, automated query of the credential and policy directory by the access controller; receive credential and policy information from the credential and policy directory for one or more individuals who may require access to the enclosed area, and store in a local cache accessible by the processor, the received credential and policy information of the credential and policy directory and the credential and policy information of the one or more individuals; periodically request a credential and policy information update from the credential and policy directory; receive, at the processor, the credential and policy information update in response to the periodic request; update the local cache based on the credential and policy information update; receive an access request to allow an individual access to the enclosed area, physical entry by the individual to the enclosed area being controlled by a door system in communication with the access controller; compare the access request to the credential and policy information in the local cache; when the comparison indicates a match, grant the individual access to the enclosed area; determine if an entry signal corresponding to the individual has originated from the door system; and deny log on to any computer within the enclosed area by the individual in absence of the entry signal. receive credential and policy directory information, from a remote credential and policy directory, to allow self-provisioning of the access controller through periodic, automated query of the credential and policy directory by the access controller; receive credential and policy information from the credential and policy directory for one or more individuals who may require access to the enclosed area, and store in a local cache accessible by the processor, the received credential and policy information of the credential and policy directory and the credential and policy information of the one or more individuals; periodically request a credential and policy information update from the credential and policy directory; receive, at the processor, the credential and policy information update in response to the periodic request; update the local cache based on the credential and policy information update; receive an access request to allow an individual access to the enclosed area, physical entry by the individual to the enclosed area being controlled by a door system in communication with the access controller; compare the access request to the credential and policy information in the local cache; when the comparison indicates a match, grant the individual access to the enclosed area; determine if an entry signal corresponding to the individual has originated from the door system; and deny log on to any computer within the enclosed area by the individual in absence of the entry signal.