QR code

Users scan a QR code displayed on the Windows login screen using the 1Kosmos mobile app. No password is required when QR is configured as the sole authentication method.

---

Admin Setup

Configure the Authentication Journey

1

In AdminX, navigate to Applications > Windows MFA > Adaptive Auth Journeys.

2

Create a new journey or edit an existing one.

3

Under Authentication Method, select QR Code.

• To use QR as the sole authentication factor (passwordless), select QR Code only.

• To combine with a password, select Password & QR Code.

When QR is configured as the sole factor, users are not prompted for a password at any point in the login flow. Ensure your organisation's security policy permits passwordless authentication before enabling this configuration.

4

Assign the journey to the target user group or machine policy.

5

Save and publish the journey.

User Guide

Login from the User Tile

1

At the Windows login screen, click the 1Kosmos tile.

2

Select QR Code from the available authentication options.

3

A QR code is displayed on the Windows login screen.

4

Open the 1Kosmos mobile app and use the QR scanner to scan the code.

5

The app confirms the scan and sends an approval to the Credential Provider.

6

The Windows session unlocks and you are logged in.

The QR code expires after a fixed timeout. If it expires before scanning, click Refresh to generate a new code.

Login from the Other User Tile

1

At the Windows login screen, click Other User.

2

Enter your Windows username and press Enter.

3

A QR code is displayed automatically, no further input is required on the Windows side.

4

Open the 1Kosmos mobile app and use the QR scanner to scan the code.

5

The app confirms the scan and sends an approval to the Credential Provider.

6

The Windows session unlocks and you are logged in.

When using the Other User tile, any persona enrolled in the 1Kosmos mobile app can scan the QR code. The authentication context is tied to the username entered on the Windows side, not the mobile persona performing the scan. Ensure the correct username is entered before the QR code is presented.

Troubleshooting

Issue	Likely Cause	Resolution
QR code not scanning	Camera obstructed; QR code too small on screen; poor lighting	Clean the device camera lens; increase display brightness; move closer to the screen; try scanning from a different angle
QR code expired before scanning	User took too long to initiate the scan	Click Refresh on the Windows login screen to generate a new QR code and scan immediately
Camera permission denied on mobile	The 1Kosmos app does not have camera access	On the mobile device, go to Settings > Apps > 1Kosmos and enable Camera permission, then retry
QR scanned but no login response	Mobile app lost connectivity after scanning	Verify the mobile device has an active internet connection; retry the login flow
QR code screen does not appear	Journey not configured with QR method; agent not running	Verify the assigned Adaptive Auth Journey includes QR Code as the authentication method; confirm the Credential Provider service is running on the workstation