For four years, the return to office has been the subject of endless headlines, mandates, surveys, and counter-surveys. At this point the argument has outlived its subject. The office everyone has been debating and speculating about already came back. It just came back different.

CBRE’s 2026 global occupancy research, released in July, found peak office use reaching 80 percent. That’s above pre-pandemic norms of 65 to 75 percent, but the bigger insight was that average occupancy landed around 53 percent. McKinsey’s talent research shows the share of knowledge workers who are mostly in-person has roughly doubled in recent years to 68 percent, with hybrid winning as the standard arrangement for in office roles. Employers now target about three days a week and get about 2.9. In other words, the modern office is both fuller and emptier. It may be packed on Tuesday, sparse on Friday, and shared all week. The 1:1 employee-to-desk ratio has become rare, at least a third of organizations are running more than 1.5 employees per seat, and shared office amenity spaces have grown 120 percent since 2021.

None of this is a phase. It is the workplace that exists, and it raises a question that lands directly on the desks of architects, engineers, and building owners: how do you actually run a building where nobody has assigned space, teams surge in and out on project rhythms, and the same doors serve different users on different days?

Something in the building must know who everyone is. That job falls to the least glamorous, but perhaps most critical system in the building: the system that decides who comes through the door.

From place-first to identity-first

The old office was place-first. The building was the fixed element, and people were attached to it by a desk, a floor, and a badge. Access control was correspondingly simple, a key to a place. The flexible workplace flips that logic. Its organizing principle is no longer a fixed desk or a seating chart but the identity of the user. Who are you, where are you, what team are you on, what are you working on this week?

"The door is where the org chart touches the physical world," says Maria Coleman, business development leader for workspaces at Salto. "In a flexible workplace, access stops being about guarding a perimeter and starts being about orchestrating people through a network of workspaces and places. You cannot run hot desks, meeting pods, and shared amenities across multiple sites on old school badges."

Identity-first access looks like this in practice. On day one, a new hire’s phone opens the garage, the lobby, and the project room before anyone has printed a badge. Join a project, and the project’s spaces open. Leave the company, and every door in every office closes in the same instant the login does. This convergence unifying physical and digital identity is being called Identity Management.

What it means for building teams

For AEC professionals, the shift changes where access sits in the project. It is no longer just door hardware specified late; it is intelligent workplace infrastructure decided early, alongside other critical building systems like HVAC and IT, because it determines how the building will actually operate. It also changes the retrofit math. Wireless, battery-powered electronic locks that install on existing doors without trenching or new cabling means a 1980s tower can join the flexible era while keeping walls, doors, and other physical structure in place.

The occupancy data was there all along

The less obvious payoff is the data. While companies debated attendance policy, the access system was recording what actually happened. Access events are the building’s most honest occupancy signal, more reliable than surveys and cheaper than sensor retrofits, and they are increasingly the foundation for operating decisions. Presence-aware room controls adjust heating and cooling based on who is really there rather than operating hours.

"Occupancy truth is energy reality," Coleman says. "When you know how the building is really used, you can plan accordingly, right-size the space you need, and make lease decisions with evidence instead of instinct."

Designing for a workplace nobody can predict

The honest truth about the workplace of 2040 is that nobody knows its shape. Hybrid patterns will keep shifting, AI is redefining workflows faster than floor plates can follow, and the next reconfiguration is already forming. Which is an argument for infrastructure that is not married to any single configuration of work. Identity-based access is, by its nature, futureproof.

"Flexibility is permanent. Workspaces are not," Coleman says. "Our job is to make sure the building never has to be rebuilt just because the way people work changed again."

That may be the most useful way for building teams to think about access control now. Not as hardware on a door, but as the layer that lets a building evolve for decades. Adaptability is sustainability, and the most sustainable building is the one that never has to be rebuilt to accommodate the way people work next.