No dashboard screen — passkeys are driven from your own application. A
WebAuthn passkey is registered and used where the end user is present: your app
requests options from these endpoints, runs the browser ceremony
(
navigator.credentials.create() / .get(), or the
@simplewebauthn/browser helper), and posts the
resulting attestation or assertion back to the matching verify endpoint. Set
the relying party (rpId and origin) to your own domain. The Orbit dashboard
covers OTP send/check, profiles, and analytics — it does not enroll or revoke
passkeys on a user’s behalf. Retire a lost or rotated key from your app with
POST /verify/passkey/factors/{factorId}/revoke.