Seald tenant administration
You are administering one tenant — the one your sign-in is scoped to. The gateway compares every request against your own tenant before it dispatches, so a request naming another one is refused rather than served.
People are shown by their tokenized reference, not by name. A reference is an opaque identifier — do not read it as a person. Resolving one to a human being is a separate, admin-gated and audited call, and this page does not make it.
Pending enrolments
Devices waiting for a decision. Approving mints the card; rejecting denies a real person their access, so both are recorded against you.
Roster — active devices
Active devices only. A revoked or retired device is absent by contract, not by filtering here.
Invitations
An outstanding invitation grants nothing until it is claimed by a login proving the invited verified claim.
Invite someone
Federated subject links
Binding an IdP subject to a Seald identity takes effect immediately and can redirect an established person's access. Unbinding removes access.
Break-glass backup key
Load the non-secret registration manifest the
seald-backup-key ceremony wrote. It carries the backup public key, its
fingerprint, the split id and each custodian's public key and reference — never a private key
or a share. Nothing loaded here is written to browser storage.
Every custodian must confirm receipt of their share before you register, so a lost share is caught while the key can still be re-split. Registration is first-wins and cannot be rotated or undone: once a tenant has a backup key, this registers nothing further. Treat it as irreversible.
The staged shares this manifest describes have a
limited window, and registering is refused once it closes — even with every
custodian confirmed. If registering reports that custodians have no live staging record for
this split, the shares were never staged under it or the window has lapsed:
re-run the seald-backup-key ceremony to stage a fresh split.
Nothing was registered, so the same backup key can be used again.