Passkeys and MFA
Raven supports passkeys and password with TOTP. Administrators must use MFA.
Commerce operations network
Every order, one network.
Dominion connects identity, payments, storefronts, warehouses and monitoring, so a sale moves from checkout to the customer's door without leaving the system.
- 5 connected services
- One sign-in for all of them
- Live parcel tracking
You are here · the identity tower
Raven
One sign-in opens every door
Raven is the identity provider for all of Dominion. People sign in once, with a passkey or a password and code, and move between apps without signing in again.
- Passkeys, password with TOTP, mandatory MFA for admins
- Roles per app, scoped to a store or a mailbox
- App switcher and "Continue as" on every login page
You are here · the command center
Citadel
The command center that runs the rest
Citadel creates new web projects in a five-step wizard, orchestrates EcomBuilder, WHM and GreyPay, and keeps watch over every platform.
- Project wizard with autosave
- Monitors shipments, stock and uptime
- Opens and resolves incidents on its own
You are here · the payments office
GreyPay
Payments and the back office
GreyPay administers payments for every store, with an admin portal for the team and a portal for each store.
- Admin and store portals
- Store and finance management
- Signs in through Raven, roles per store
You are here · the storefront street
EcomBuilder
Storefronts, designed and published
EcomBuilder is where stores are designed. A visual wizard builds the storefront, publishes it to the cloud and shares view-only links for review.
- Visual design wizard
- Cloud publishing
- View-only links for clients and reviewers
You are here · the warehouse district
WHM
Stock, vendors and every shipment
WHM runs the warehouse: stock, vendors, channel orders and the store integrations with WooCommerce, ShipStation and Freightcom.
- Orders from every connected store
- Labels through ShipStation and Freightcom
- Our own parcel tracking engine
You are here · the shipping yard
Tracking
Parcels you can follow, live
WHM asks the carriers for live status and tells the customer at the moments that matter. A WordPress plugin brings it all into WooCommerce, compatible with WooCommerce Shipment Tracking.
- Live status from GLS Canada and Canada Post
- Out for delivery, delivered and problem emails, each sent once
- Citadel alerts when a parcel gets stuck
How it connects
Watch a request travel the city
Pick a flow. Each step moves across the real streets between the services involved, in the order it happens in production code.
- —Choose a flow to play it on the map.
Services
Five services, one system
Each service does one job well, and they share identity, events and alerts.
What's new
Recently shipped
The latest changes across the network. Open one for the details.
Security
Built to be trusted
The rules every service follows when it talks to another one.
Verified tokens
Every app checks the id_token signature against Raven's keys and only trusts https issuers.
One-time tickets
After sign-in an app receives a ticket that lives 60 seconds and works once. Tokens never travel in a URL.
Signed webhooks
Stores and WHM sign every message with HMAC-SHA256 over the raw body, and reject anything unsigned.
Roles per app
Access is granted per app and can be scoped to a single store. No matching role means no access.
Customer emails once
Notifications are claimed atomically, so a repeated event never emails a customer twice.
Status
Where everything stands
An honest snapshot of each piece.
| Service | What it does | Status |
|---|---|---|
| Citadel | Command center, project wizard, monitoring | Complete v1 |
| Raven | Identity and single sign-on; unified mail planned | SSO live |
| WHM | Warehouse, shipping, integrations, parcel tracking | In use |
| GreyPay | Payments and administration | In use |
| EcomBuilder | Storefront design and publishing | In use |
| Dominion Tracking | WordPress plugin for WooCommerce stores | Verified in a test WordPress |
| Production rollout | Raven deployment and real redirect URLs per app | Next step |