Issuer onboarding
Bring a new issuer tenant online
Register tenants, invite issuer admins, and issue activation links that open the canonical /issuer portal after trusted-device setup.
Step 1
Register tenant
Create the issuer tenant record and assign the first admin user.
Step 2
Send activation link
Deliver a single-use link to /issuer/activate through your approved channel.
Step 3
Register trusted device
The invited user registers a passkey before opening the issuer portal.
Step 4
Sign in to /issuer
Issuer staff authenticate with trusted-device approval and land on /issuer.
Tenant registration
Collect issuer name, contact email, and tenant metadata so each issuer gets a dedicated secure environment with tenant_id isolation.
User roles
Assign issuer admin or staff roles. Activation links always target /issuer/activate and post-login redirects use /issuer.
Invite issuer user
Messaging apps are delivery channels only. They are not proof of identity. Send only the activation link to /issuer/activate, never permanent passwords or recovery codes.