To onboard users with QR code you should configure authentication domain with "ntk cfg setc :auth_domain" where is your Notakey Authentication Server API FQDN or else automatically detected fallback domain may be used incorrectly for QR codes copied from management dashboard.

If you have configured SRV record for your domain (, configure  authentication domain as "ntk cfg setc :auth_domain". 

Note that authentication server service has to be restarted after changes with “ntk as restart”.