Secure Access
Authenticate with WebAuthn credentials bound to trusted devices. Password fallback is only enabled when biometric verification is unavailable.
Security posture
Every login updates credential counters, issues signed JWT sessions, and logs audit events for monitoring.
Identity Assurance
Device-bound credentials, encrypted templates, and secure session issuance.