> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/windows-workstation-mfa/authentication-methods/qr-code.md).
# QR code
***
### Admin Setup
#### Configure the Authentication Journey
{% stepper %}
{% step %}
In AdminX, navigate to **Applications > Windows MFA > Adaptive Auth Journeys**.
{% endstep %}
{% step %}
Create a new journey or edit an existing one.
{% endstep %}
{% step %}
Under **Authentication Method**, select **QR Code**.
* To use QR as the sole authentication factor (passwordless), select **QR Code** only.
* To combine with a password, select **Password & QR Code**.
{% hint style="info" %}
When QR is configured as the sole factor, users are not prompted for a password at any point in the login flow. Ensure your organisation's security policy permits passwordless authentication before enabling this configuration.
{% endhint %}
{% endstep %}
{% step %}
Assign the journey to the target user group or machine policy.
{% endstep %}
{% step %}
Save and publish the journey.
{% endstep %}
{% endstepper %}
### User Guide
#### Login from the User Tile
{% stepper %}
{% step %}
At the Windows login screen, click the **1Kosmos** tile.
{% endstep %}
{% step %}
Select **QR Code** from the available authentication options.
{% endstep %}
{% step %}
A QR code is displayed on the Windows login screen.
{% endstep %}
{% step %}
Open the 1Kosmos mobile app and use the QR scanner to scan the code.
{% endstep %}
{% step %}
The app confirms the scan and sends an approval to the Credential Provider.
{% endstep %}
{% step %}
The Windows session unlocks and you are logged in.
{% endstep %}
{% endstepper %}
{% hint style="info" %}
The QR code expires after a fixed timeout. If it expires before scanning, click **Refresh** to generate a new code.
{% endhint %}
#### Login from the Other User Tile
{% stepper %}
{% step %}
At the Windows login screen, click **Other User**.
{% endstep %}
{% step %}
Enter your Windows username and press **Enter**.
{% endstep %}
{% step %}
A QR code is displayed automatically, no further input is required on the Windows side.
{% endstep %}
{% step %}
Open the 1Kosmos mobile app and use the QR scanner to scan the code.
{% endstep %}
{% step %}
The app confirms the scan and sends an approval to the Credential Provider.
{% endstep %}
{% step %}
The Windows session unlocks and you are logged in.
{% endstep %}
{% endstepper %}
{% hint style="info" %}
When using the Other User tile, any persona enrolled in the 1Kosmos mobile app can scan the QR code. The authentication context is tied to the username entered on the Windows side, not the mobile persona performing the scan. Ensure the correct username is entered before the QR code is presented.
{% endhint %}
### Troubleshooting
| Issue | Likely Cause | Resolution |
| ---------------------------------- | ------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| QR code not scanning | Camera obstructed; QR code too small on screen; poor lighting | Clean the device camera lens; increase display brightness; move closer to the screen; try scanning from a different angle |
| QR code expired before scanning | User took too long to initiate the scan | Click **Refresh** on the Windows login screen to generate a new QR code and scan immediately |
| Camera permission denied on mobile | The 1Kosmos app does not have camera access | On the mobile device, go to **Settings > Apps > 1Kosmos** and enable **Camera** permission, then retry |
| QR scanned but no login response | Mobile app lost connectivity after scanning | Verify the mobile device has an active internet connection; retry the login flow |
| QR code screen does not appear | Journey not configured with QR method; agent not running | Verify the assigned Adaptive Auth Journey includes QR Code as the authentication method; confirm the Credential Provider service is running on the workstation |
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.1kosmos.com/authentication/windows-workstation-mfa/authentication-methods/qr-code.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.