Showing all phase content; selected phase is highlighted in section badges.

Overview

As-of: 2026-05-09. Source of truth: passkey-shell repo, rg-passkey-stg Azure resource group.

What This Is

Passkey Portal is a governance-first credential issuance system that mediates time-bounded access to shared credentials stored in Keeper Security’s vault. It wraps Keeper’s native sharing mechanism in an approval workflow, lease lifecycle, and audit trail — enforcing who can request credentials, who can approve, how long access lasts, and what happens when it expires.

The system runs as a Node/TypeScript backend (Express + Prisma + Postgres) with a React frontend (Fluent UI 9 + Tailwind) designed to embed in Microsoft Teams via Bot Framework Adaptive Cards. Identity is Entra ID (Azure AD). Vault reads use the KSM SDK; vault writes (one-time share creation) use Commander CLI subprocess. All secrets are Azure Key Vault references — no raw credentials in the application.

Current State (v1)

Staging is deployed and healthy. Production App Service exists but is not yet serving traffic.

DimensionStatus
Staging App Serviceapp-passkey-stg-ben-6b2f — deployed, /healthz 200
Prod App Serviceapp-passkey-prod-1353 — provisioned, not deployed
Vault modestaging (KSM reads real vault, Commander shares stubbed)
Governance gateHARDEN_GOVERNANCE_v1=false (soak mode)
Bot FrameworkNot registered — Teams notification flow is skeleton only
Background jobsEnabled on staging (RUN_BACKGROUND_JOBS=true)
Backend test suite33 test files, Node built-in runner, passing
Frontend test runnerNot wired — vitest not in scripts, 2 test files exist
Keeper trialActive, trial period (12-day window from provisioning)
KSM ApplicationCreated, IP lock checked at creation (needs unchecking)

Four Questions This Site Answers

  1. Architecture — Component topology, data flow, integration points, data model. How the system works technically, per phase.

  2. Evolution — v1 (current pilot) to v3 (planned hardening + scale) to v4 (SMS Android MFA). Where the product is going and what’s underspecified.

  3. Cost — Build cost to date, Azure/Keeper run rate at current scale, projected cost at 100/1,000/10,000 users. Real SKU pricing, not estimates.

  4. Roadmap & Next Steps — What’s needed from leadership: headcount, vendor decisions, security review time, production deployment approval.

PageWhat It Covers
ArchitectureComponents, data flow, integrations, deployment topology, data model
Decision LogMajor architectural decisions with context and rationale
Implementation StatusHonest component-by-component snapshot: done / stubbed / not started
Security ArchitectureAuth flows, secret handling, audit trail, threat surface, compliance posture
Cost ModelBuild cost, ongoing Azure/Keeper run rate, projected cost at scale
Roadmapv1 now / v3 next / v4 later / out of scope
Risk RegisterTechnical and operational risks with mitigation status
AsksWhat the product needs from leadership
GlossaryReference definitions for Keeper, KSM, Entra, Adaptive Cards, etc.