Industry
Enterprise access.
One credential. Doors, laptops, applications, cafeteria. Phishing-resistant, hardware-bound, and quietly the same secure-element ecosystem that powers transit.
What changes when the door is also the second factor
The classic enterprise rolled out a 125 kHz badge for doors, an LDAP password for the workstation, an OTP token for VPN, and accepted that ten percent of help-desk volume would be password resets. With FIDO2 + DESFire-class cards, all four become the same tap. Issuance happens once; revocation happens once.
Pilot 100 cards across one office.
The fastest way to find out if your IdP and badge system will play nicely is to actually run the pilot. Six to eight weeks.