SaaS-based physical access control