SMS, Email, Voice, OTP

Available from v2.0.6.0. Users receive a one-time passcode via SMS, email, or voice call. No mobile app installation is required.

---

Admin Setup

Configure the Authentication Journey

1

In AdminX, navigate to Applications > Windows MFA > Adaptive Auth Journeys.

2

Create a new journey or edit an existing one.

3

Under Authentication Method, select Any OTP.

4

Assign the journey to the target user group or machine policy.

5

Save and publish the journey.

Prerequisite: AD Profile Attributes

The delivery options presented to a user depend on the attributes populated on their Active Directory profile. The phone number and email address fields must be populated before the user attempts to log in.

If the user has registered	Options shown on login screen
Email address only	Send Code via Email
Mobile number only	Send Code via SMS, Send Code via Call
Both email address and mobile number	Send Code via Email, Send Code via SMS, Send Code via Call
Neither	No OTP delivery options shown — user cannot complete OTP authentication

The user can also enter a TOTP code from the 1Kosmos mobile app directly without selecting any of the delivery method options above. The TOTP input field is available regardless of AD attribute configuration.

---

User Guide

SMS / Email / Voice OTP Login

1

At the Windows login screen, click the 1Kosmos tile.

2

If using the Other User tile, enter your username first.

3

Enter your Windows password when prompted.

4

On the verification code screen, select your preferred delivery method:

• Send Code via Email
• Send Code via SMS
• Send Code via Call

5

Retrieve the one-time passcode from your email inbox, SMS message, or voice call.

6

Enter the passcode in the code input field on the Windows login screen.

7

Click Verify (or press Enter).

8

The Windows session unlocks and you are logged in.

If you enter an incorrect OTP more than the permitted number of times, your account will be locked. Contact your helpdesk to unlock the account. Do not repeatedly attempt to guess a code.

---

Troubleshooting

Issue	Likely Cause	Resolution
SMS, Email, or Voice option not appearing	The corresponding attribute (mobile number or email) is not populated on the user's AD profile	Populate the mobile and/or mail attribute on the user's AD account and retry; contact your AD administrator if you do not have access
Code not received via SMS or Voice	Incorrect mobile number on AD profile; carrier delay; network issue	Verify the mobile number on the AD profile is correct and in E.164 format; wait up to 60 seconds and retry; try an alternative delivery method if available
Code not received via Email	Incorrect email on AD profile; email filtered to spam/junk	Verify the email address on the AD profile; check spam/junk folders; try an alternative delivery method if available
Code entered but rejected	OTP expired before entry; code typed incorrectly	Request a new code and enter it promptly; ensure no transcription errors; note that OTP codes are case-sensitive if alphanumeric
Account locked after failed OTP attempts	Maximum incorrect OTP attempts exceeded	Contact the helpdesk to unlock the account; do not retry until the account is unlocked
No delivery options shown at all	Neither mobile number nor email is on the AD profile	Contact your AD administrator to populate the required attributes before retrying