Turqoa Docs

Integrations

Turqoa connects to your existing port infrastructure through a modular integration layer. Each integration follows a standardized adapter pattern, ensuring consistent authentication, error handling, and data flow regardless of the external system.

Integration Architecture

Turqoa uses an adapter-based integration model. Each external system communicates through a dedicated adapter that normalizes data into Turqoa's internal event schema. Adapters run as independent microservices, enabling isolated scaling, deployment, and failure recovery.

Turqoa Core
  → Event Bus (Kafka)
  → Decision Engine
  → Data Store (PostgreSQL)
        │
        ▼
  Integration Adapter Layer
    │         │         │
    ▼         ▼         ▼
  TOS      Cameras     SSO
 (N4,     (ONVIF,    (SAML,
  TOPS)    RTSP)      OIDC)

Supported Systems

CategorySystemProtocolStatus
Terminal Operating SystemNavis N4REST API / Web ServicesGA
Terminal Operating SystemTOPS ExpertSOAP / XMLGA
Terminal Operating SystemTideworksREST APIBeta
Camera SystemsONVIF-compliant camerasONVIF / RTSPGA
Camera SystemsAxis CommunicationsVAPIX + ONVIFGA
Camera SystemsHikvision / DahuaISAPI + ONVIFGA
Identity ProvidersAzure AD / Entra IDSAML 2.0 / OIDCGA
Identity ProvidersOktaSAML 2.0 / OIDCGA
Identity ProvidersOn-premise ADFSSAML 2.0GA

Authentication Methods

Turqoa adapters support multiple authentication mechanisms depending on the target system:

  • API Key --- Static keys stored in Turqoa's encrypted credential vault. Used for TOS REST APIs.
  • OAuth 2.0 Client Credentials --- Machine-to-machine authentication for cloud-hosted services.
  • Certificate-based (mTLS) --- Mutual TLS for high-security integrations. Required for some TOS deployments.
  • SAML / OIDC --- Federated identity for operator authentication via SSO providers.

All credentials are stored encrypted at rest using AES-256 and are never logged or exposed in API responses.

Data Flow Patterns

Inbound (External to Turqoa)

External systems push or are polled for data that feeds into Turqoa's event pipeline:

  1. Webhook push --- The external system sends events to a Turqoa-hosted endpoint (preferred).
  2. Polling --- Turqoa periodically queries the external system for new data (fallback when webhooks are unavailable).
  3. Stream ingestion --- Continuous data streams such as RTSP video feeds from cameras.

Outbound (Turqoa to External)

Turqoa publishes decisions and events back to external systems:

  1. Decision callbacks --- Gate decisions are sent to the TOS to update appointment and container status.
  2. Event notifications --- Security events are forwarded to SIEM or alerting systems via webhook.
  3. Audit exports --- Scheduled or on-demand export of audit data to external compliance systems.

Next Steps