Account Management
Account management capabilities let users add, remove, and manage multiple organization accounts on a single device. They cover the full lifecycle from onboarding.
Capabilities in this category
Multi-account support
Account onboarding
Account password reset
Account removal
Orphan account cleanup
Transfer accounts
Multi-account support
Link and manage multiple organization accounts on a single device.
What it does — Allows a single user device to hold credentials and authentication state for multiple tenants or applications. Users switch between accounts from the home screen, and each account has its own OTP and authentication context.
When to use it — Users with accounts across multiple 1Kosmos-integrated organizations, contractors with multiple employer accounts, or consumers with logins to multiple services.
Key details
Unlimited accounts per device (subject to admin policy)
Per-account OTP display
Independent authentication state per account
Account-specific notification routing
Account onboarding
Link a new tenant or application account to the device.
What it does — Registers a user account with the device and the 1Kosmos platform. Three onboarding paths are supported: scanning a QR code from an email invite using the app, scanning the QR code with the device camera, or tapping a registration link in an email.
When to use it — Initial registration of an account, adding a new account to a device that already holds others, or re-onboarding after device replacement.
Key details
QR-based onboarding via app
QR-based onboarding via device camera
Magic link onboarding via email
Invite expiration typically 72 hours (configurable by admin)
Account password reset
Reset a tenant account password from within the app.
What it does — Allows users to reset their organization-level password directly from the app after biometric or PIN authentication. Eliminates dependency on helpdesk for password resets.
When to use it — When a user has forgotten their tenant password and needs to reset it without contacting IT.
Key details
Biometric authentication required
PIN fallback if biometrics unavailable
New password applied immediately
No helpdesk involvement required
Transfer accounts to a new device
Move your 1Kosmos accounts from your current device (Device 1) to a new device (Device 2) without re-enrolling. Authorize the transfer on Device 1 with LiveID, then complete it by scanning the QR code shown on Device 2.
Available from app version 1.30.20 onwards.
Before you begin
Both devices must be running app version 1.30.20 or later.
LiveID must be enrolled on Device 1.
Both devices need an active internet connection throughout the transfer.
Step 1 — Start the transfer on Device 1
Open the 1Kosmos app.
Go to Menu and tap Transfer Accounts.
On the Transfer Accounts screen, read the Steps to follow section. Do not tap Continue yet — set up Device 2 first.
Step 2 — Prepare Device 2
Open the 1Kosmos app on Device 2.
On the home screen, tap Restore.
On the Restore Account screen, tap Transfer from another device.
On the Before you continue screen, select the checkboxes and tap Continue.
A QR code appears on Device 2.
Step 3 — Complete the transfer on Device 1
Return to Device 1 and tap Continue.
Select all the checkboxes, then tap Continue.
Verify your LiveID by capturing a selfie.
Once the LiveID scan completes, Device 1 is ready to scan the QR code.
Scan the QR code shown on Device 2.
Device 1 confirms the account was transferred successfully. Result: Your accounts are now transferred from Device 1 to Device 2.
Account removal
Permanently remove an account and all its data from the device.
What it does — Deletes a linked account and all associated credentials, OTPs, and authentication state from the device. The action requires user confirmation and is irreversible.
When to use it — Departing employees, deprecated accounts, or users moving to a new device who want to remove old accounts.
Key details
Requires user confirmation
All account data permanently deleted
Other accounts on the device remain unaffected
Generates an audit event in 1Kosmos logs
Account removal is irreversible. Once removed, an account cannot be restored without re-onboarding. Other accounts on the same device are not affected.
Orphan account cleanup
Automatically detect and remove accounts that have been unlinked by an admin.
What it does — When an admin unlinks a device in the AdminX portal, the affected accounts become orphaned. On next app launch, the app detects the orphaned state, removes the affected accounts, syncs active accounts, and notifies the user.
When to use it — Automatic — no user action required. Triggers an E_ORPHAN_ACCOUNT_REMOVED event for audit logging.
Key details
Automatic on app launch
User notification on removal
Audit event generated
Available from app version v1.10.90 onwards
Account management lifecycle
Last updated
Was this helpful?