> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/windows-workstation-mfa/authentication-methods/sms-email-voice-otp.md).

# SMS, Email, Voice, OTP

***

### Admin Setup

**Configure the Authentication Journey**

{% stepper %}
{% step %}
In AdminX, navigate to **Applications > Windows MFA > Adaptive Auth Journeys**.
{% endstep %}

{% step %}
Create a new journey or edit an existing one.
{% endstep %}

{% step %}
Under **Authentication Method**, select **Any OTP**.
{% endstep %}

{% step %}
Assign the journey to the target user group or machine policy.
{% endstep %}

{% step %}
Save and publish the journey.
{% endstep %}
{% endstepper %}

### **Prerequisite: AD Profile Attributes**

The delivery options presented to a user depend on the attributes populated on their Active Directory profile. The phone number and email address fields must be populated before the user attempts to log in.

| If the user has registered           | Options shown on login screen                                           |
| ------------------------------------ | ----------------------------------------------------------------------- |
| Email address only                   | Send Code via Email                                                     |
| Mobile number only                   | Send Code via SMS, Send Code via Call                                   |
| Both email address and mobile number | Send Code via Email, Send Code via SMS, Send Code via Call              |
| Neither                              | No OTP delivery options shown — user cannot complete OTP authentication |

{% hint style="info" %}
The user can also enter a TOTP code from the 1Kosmos mobile app directly without selecting any of the delivery method options above. The TOTP input field is available regardless of AD attribute configuration.
{% endhint %}

***

### User Guide

**SMS / Email / Voice OTP Login**

{% stepper %}
{% step %}
At the Windows login screen, click the **1Kosmos** tile.
{% endstep %}

{% step %}
If using the **Other User** tile, enter your username first.
{% endstep %}

{% step %}
Enter your Windows password when prompted.
{% endstep %}

{% step %}
On the verification code screen, select your preferred delivery method:

* **Send Code via Email**
* **Send Code via SMS**
* **Send Code via Call**
  {% endstep %}

{% step %}
Retrieve the one-time passcode from your email inbox, SMS message, or voice call.
{% endstep %}

{% step %}
Enter the passcode in the code input field on the Windows login screen.
{% endstep %}

{% step %}
Click **Verify** (or press **Enter**).
{% endstep %}

{% step %}
The Windows session unlocks and you are logged in.
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
If you enter an incorrect OTP more than the permitted number of times, your account will be locked. Contact your helpdesk to unlock the account. Do not repeatedly attempt to guess a code.
{% endhint %}

***

### Troubleshooting

| Issue                                     | Likely Cause                                                                                   | Resolution                                                                                                                                                  |
| ----------------------------------------- | ---------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
| SMS, Email, or Voice option not appearing | The corresponding attribute (mobile number or email) is not populated on the user's AD profile | Populate the `mobile` and/or `mail` attribute on the user's AD account and retry; contact your AD administrator if you do not have access                   |
| Code not received via SMS or Voice        | Incorrect mobile number on AD profile; carrier delay; network issue                            | Verify the mobile number on the AD profile is correct and in E.164 format; wait up to 60 seconds and retry; try an alternative delivery method if available |
| Code not received via Email               | Incorrect email on AD profile; email filtered to spam/junk                                     | Verify the email address on the AD profile; check spam/junk folders; try an alternative delivery method if available                                        |
| Code entered but rejected                 | OTP expired before entry; code typed incorrectly                                               | Request a new code and enter it promptly; ensure no transcription errors; note that OTP codes are case-sensitive if alphanumeric                            |
| Account locked after failed OTP attempts  | Maximum incorrect OTP attempts exceeded                                                        | Contact the helpdesk to unlock the account; do not retry until the account is unlocked                                                                      |
| No delivery options shown at all          | Neither mobile number nor email is on the AD profile                                           | Contact your AD administrator to populate the required attributes before retrying                                                                           |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.1kosmos.com/authentication/windows-workstation-mfa/authentication-methods/sms-email-voice-otp.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.