Entra Passkey for Frontline Workers

1Kosmos enables frontline workers to authenticate into Microsoft Entra using a passkey verified through LiveID biometric (selfie).

---

Overview

Identity is confirmed in real time - ensuring only the verified individual gains access, not just a trusted device or credential.

What it is

This use case lets frontline workers sign in to Microsoft Entra using a passkey that is verified with a LiveID biometric selfie, rather than a password alone. Because authentication is tied to a live facial biometric, access is confirmed in real time for the verified individual - not just for a trusted device or credential.

How it works

This integration supports two delivery channels depending on your deployment scenario:

• Mobile — for field workers on Intune-managed iOS devices
• Browser — for desk-based workers using Chrome

Both channels use the same underlying PassKey + LiveID authentication workflow. Before configuring either channel, ensure the following are in place.

Prerequisites

• A 1Kosmos tenant with a community configured
• Users provisioned in Microsoft Azure AD
• LiveID enrolled and passkey registered for each user via the Registration workflow
• Access to AdminX
• Authentication workflow (PassKeyWithLiveID) deployed and active, with a valid access code