Privileged Access Management
Administrative console access is gated behind biometric verification.
Scenario
Before an administrator can open a production server console, Daltrey requires biometric proof and logs the access event for later review.
Privileged access · Console
console.prod-01 Production server · root shell
You'll be redirected to Daltrey to enter your email, which triggers the login approval and face scan on your Daltrey mobile app. The code → token exchange happens on the server (confidential client + PKCE) — the browser never sees the secret or the raw tokens.
Why this matters
Security without clumsy friction
Daltrey turns identity proof into a reusable control surface — strong enough for regulated environments, fast enough for real users, and visible enough for executive buyers.