Architecture For Access Management

Disclosed are techniques that use user devices and a server system to process employee generated requests to allow guest access registration. A server system receives a request for guest registration and the server system sends in response to the request a message to a guest user device with the message including a request for user credentials. The user credentials are supplied from a user's PII wallet carried by the user. The server system receives from an employee user device a verification of the guest registration, produces an access policy for the guest user device and causes the produced policy and guest credentials to be stored in a distributed ledger system.