End User Guide

This section explains how users set up Orion Authenticator on their workstation and use it during login.

---

Onboarding Orion to your device

Before using Orion for login, users must onboard the authenticator from their profile.

1. Log in to your 1Kosmos tenant

2. Navigate to the profile icon and select My Profile

3. Navigate to Login Options

4. Under Setup, select Orion Authenticator

Once onboarding is completed:

• The device is listed under Login Options

• An onboarding event is generated

What happens during onboarding

During onboarding, the portal detects the Orion agent installed on the workstation.

• If Orion is installed and running → onboarding proceeds

• If Orion is not detected → onboarding does not complete

Supported browsers for onboarding

Onboarding is supported on:

• Google Chrome

• Microsoft Edge

• Mozilla Firefox

• Safari

• Brave

  If using Brave browser, disable Shields to allow Orion detection.

Sign in using Orion Authenticator

After onboarding, Orion Authenticator can be used during login as a multi-factor authentication method.

Users generate a passcode from the Orion agent and use it along with their password by selecting Password & OTP on the login screen.

Upon successful validation, access is granted.

Once validated, you will be successfully signed in.

Understanding Orion passcodes

Orion generates time-based passcodes that are valid for a short duration.

• A new passcode is generated automatically after expiration

• Always use the currently displayed passcode during login

Viewing Orion logs

Orion stores logs locally on the workstation. These logs are useful for troubleshooting issues related to onboarding or authentication.

macOS:

/Users/{macUser}/Library/Containers/com.onekosmos.orion.mac/Data/Library/Logs/

Windows:

C:\Program Files\1Kosmos\Orion\Logs

Resetting Orion Authenticator

If required, users can reset the Orion agent.

1. Open Orion Authenticator

2. Click the information (info) icon

3. Select Reset Agent

Resetting Orion will:

• Remove all onboarded accounts

• Clear locally stored data

• Generate new device identifiers (did and publicKey)

After reset, users must onboard Orion again before using it for login.

When to reset Orion

Reset may be required in the following scenarios:

• Device is reassigned to another user

• Onboarding issues cannot be resolved

• Reconfiguration is required

If onboarding or login does not work:

• Ensure Orion Authenticator is installed and running

• Ensure the browser is able to detect Orion

• Verify that the passcode is current

• Check local logs for any errors

For detailed troubleshooting steps, refer to the Troubleshooting section.