> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/windows-workstation-mfa/authentication-methods/qr-code.md).
# QR code
Users scan a QR code displayed on the Windows login screen using the 1Kosmos mobile app. No password is required when QR is configured as the sole authentication method.
***
### Admin Setup
#### Configure the Authentication Journey
{% stepper %}
{% step %}
In AdminX, navigate to **Applications > Windows MFA > Adaptive Auth Journeys**.
{% endstep %}
{% step %}
Create a new journey or edit an existing one.
{% endstep %}
{% step %}
Under **Authentication Method**, select **QR Code**.
* To use QR as the sole authentication factor (passwordless), select **QR Code** only.
* To combine with a password, select **Password & QR Code**.
{% hint style="info" %}
When QR is configured as the sole factor, users are not prompted for a password at any point in the login flow. Ensure your organisation's security policy permits passwordless authentication before enabling this configuration.
{% endhint %}
{% endstep %}
{% step %}
Assign the journey to the target user group or machine policy.
{% endstep %}
{% step %}
Save and publish the journey.
{% endstep %}
{% endstepper %}
### User Guide
#### Login from the User Tile
{% stepper %}
{% step %}
At the Windows login screen, click the **1Kosmos** tile.
{% endstep %}
{% step %}
Select **QR Code** from the available authentication options.
{% endstep %}
{% step %}
A QR code is displayed on the Windows login screen.
{% endstep %}
{% step %}
Open the 1Kosmos mobile app and use the QR scanner to scan the code.
{% endstep %}
{% step %}
The app confirms the scan and sends an approval to the Credential Provider.
{% endstep %}
{% step %}
The Windows session unlocks and you are logged in.
{% endstep %}
{% endstepper %}
{% hint style="info" %}
The QR code expires after a fixed timeout. If it expires before scanning, click **Refresh** to generate a new code.
{% endhint %}
#### Login from the Other User Tile
{% stepper %}
{% step %}
At the Windows login screen, click **Other User**.
{% endstep %}
{% step %}
Enter your Windows username and press **Enter**.
{% endstep %}
{% step %}
A QR code is displayed automatically, no further input is required on the Windows side.
{% endstep %}
{% step %}
Open the 1Kosmos mobile app and use the QR scanner to scan the code.
{% endstep %}
{% step %}
The app confirms the scan and sends an approval to the Credential Provider.
{% endstep %}
{% step %}
The Windows session unlocks and you are logged in.
{% endstep %}
{% endstepper %}
{% hint style="info" %}
When using the Other User tile, any persona enrolled in the 1Kosmos mobile app can scan the QR code. The authentication context is tied to the username entered on the Windows side, not the mobile persona performing the scan. Ensure the correct username is entered before the QR code is presented.
{% endhint %}
### Troubleshooting
| Issue | Likely Cause | Resolution |
| ---------------------------------- | ------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| QR code not scanning | Camera obstructed; QR code too small on screen; poor lighting | Clean the device camera lens; increase display brightness; move closer to the screen; try scanning from a different angle |
| QR code expired before scanning | User took too long to initiate the scan | Click **Refresh** on the Windows login screen to generate a new QR code and scan immediately |
| Camera permission denied on mobile | The 1Kosmos app does not have camera access | On the mobile device, go to **Settings > Apps > 1Kosmos** and enable **Camera** permission, then retry |
| QR scanned but no login response | Mobile app lost connectivity after scanning | Verify the mobile device has an active internet connection; retry the login flow |
| QR code screen does not appear | Journey not configured with QR method; agent not running | Verify the assigned Adaptive Auth Journey includes QR Code as the authentication method; confirm the Credential Provider service is running on the workstation |
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.1kosmos.com/authentication/windows-workstation-mfa/authentication-methods/qr-code.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
