A method for operation of an intrusion detection system for detecting physical intrusion into a physical facility, the method comprising: - storing, by a computing system of the intrusion detection system, a set of rules in a data structure, the rules used to configure the intrusion detection system in different modes of operation according to time, day, date, and a user's identity, the set of rules executable by the intrusion detection system; and - configuring the intrusion detection system, by: - continually receiving sensor data and processing the sensor data to detect an intrusion corresponding to a presence of entities within or about the physical facility; and when detecting the intrusion within or about the physical facility: - receiving, from a user device, a set of identity credentials; - sending the set of identity credentials to an identity service to verify the user's identity that is associated with the set of credentials; and - receiving a result of a verification of the identity; and when verified: - processing, by the intrusion detection system, the detection according to rules configured for the verified user; and - when the verified user leaves the physical facility, processing the departure of the verified user according to rules configured for the verified user, wherein in case the set of identity credentials is not received from the user device after a threshold period after detection of the intrusion, a result indicating the entity as an unauthorized entity is produced and the intrusion detection system applies a set of rules for unauthorized users including raising an alarm condition. - storing, by a computing system of the intrusion detection system, a set of rules in a data structure, the rules used to configure the intrusion detection system in different modes of operation according to time, day, date, and a user's identity, the set of rules executable by the intrusion detection system; and - configuring the intrusion detection system, by: - continually receiving sensor data and processing the sensor data to detect an intrusion corresponding to a presence of entities within or about the physical facility; and when detecting the intrusion within or about the physical facility: - receiving, from a user device, a set of identity credentials; - sending the set of identity credentials to an identity service to verify the user's identity that is associated with the set of credentials; and - receiving a result of a verification of the identity; and when verified: - processing, by the intrusion detection system, the detection according to rules configured for the verified user; and - when the verified user leaves the physical facility, processing the departure of the verified user according to rules configured for the verified user, wherein in case the set of identity credentials is not received from the user device after a threshold period after detection of the intrusion, a result indicating the entity as an unauthorized entity is produced and the intrusion detection system applies a set of rules for unauthorized users including raising an alarm condition. - continually receiving sensor data and processing the sensor data to detect an intrusion corresponding to a presence of entities within or about the physical facility; and when detecting the intrusion within or about the physical facility: - receiving, from a user device, a set of identity credentials; - sending the set of identity credentials to an identity service to verify the user's identity that is associated with the set of credentials; and - receiving a result of a verification of the identity; and when verified: - processing, by the intrusion detection system, the detection according to rules configured for the verified user; and - when the verified user leaves the physical facility, processing the departure of the verified user according to rules configured for the verified user, wherein in case the set of identity credentials is not received from the user device after a threshold period after detection of the intrusion, a result indicating the entity as an unauthorized entity is produced and the intrusion detection system applies a set of rules for unauthorized users including raising an alarm condition. - receiving, from a user device, a set of identity credentials; - sending the set of identity credentials to an identity service to verify the user's identity that is associated with the set of credentials; and - receiving a result of a verification of the identity; and when verified: - processing, by the intrusion detection system, the detection according to rules configured for the verified user; and - when the verified user leaves the physical facility, processing the departure of the verified user according to rules configured for the verified user, wherein in case the set of identity credentials is not received from the user device after a threshold period after detection of the intrusion, a result indicating the entity as an unauthorized entity is produced and the intrusion detection system applies a set of rules for unauthorized users including raising an alarm condition. - processing, by the intrusion detection system, the detection according to rules configured for the verified user; and - when the verified user leaves the physical facility, processing the departure of the verified user according to rules configured for the verified user,