PingOne DaVinci Connector

Integrate 1Kosmos passwordless authentication with PingOne DaVinci using the 1Kosmos OIDC connector — enabling seamless biometric login within your DaVinci authentication flows.

---

Overview

Enable passwordless authentication for PingOne DaVinci using the 1Kosmos connector. The connector performs an OIDC redirect to 1Kosmos for device authentication and redirects back to PingOne DaVinci to complete the authentication flow.

Prerequisites

Before starting, make sure you have:

• AdminX portal — Community admin access to your 1Kosmos tenant.
• PingOne DaVinci account — Admin access to create and configure connectors and flows.

Integration Steps

Note: Open two browser tabs — one for DaVinci and one for 1Kosmos — as you will need to copy and paste information between the two.

Before starting, make sure you have:

• AdminX portal — Community admin access to your 1Kosmos tenant.
• PingOne DaVinci account — Admin access to create and configure connectors and flows.

Step 1 — Add the 1Kosmos Connector in DaVinci

1. In DaVinci, navigate to the Connections page and click New Connection.
2. In the search bar, type 1kosmos to find the 1Kosmos connector and click + to add it.
3. Enter a name such as 1Kosmos OIDC and click Create.
4. Locate the newly created connector from the connections list, click the three-dot actions menu and select Edit.
5. Copy the Redirect URL — you will need this in the next step.

Step 2 — Add the OIDC Application in 1Kosmos

1. In 1Kosmos, navigate to Applications → Add Application → OIDC → Add Integration.
2. Enter a name such as DaVinci OIDC and fill in the following details:

Field	Value
Grant Type	Authorization Code
Signing Algorithm for ID Token	RS256
Sign-in Redirect URIs	Paste the DaVinci Redirect URL from Step 1
Scopes	Leave all options enabled

1. Click Create.
2. Copy the following credentials from the newly created application:

   • Client ID
   • Client Secret

Step 3 — Complete the Connector Setup in DaVinci

1. Return to the DaVinci tab and paste the Client ID and Client Secret copied from 1Kosmos.
2. Return to the 1Kosmos tab.
3. Navigate to Settings → Authorization Server → Metadata URI and open the metadata link.
4. Copy the following parameters from the metadata response:

   • Authorization Endpoint
   • Issuer
   • Token Endpoint
   • User Info Endpoint
5. Return to DaVinci and paste the copied metadata details into the corresponding fields.
6. Add openid, email, profile to the Scope field.
7. Enable the Send state with request toggle.
8. Click Apply to save and complete the connector setup

Step 4 — Use the 1Kosmos Connector in a Flow

1. In DaVinci, create a new HTTP connector and select the HTML Form capability.
2. Configure the HTML Form node:

   • Enter a Title such as Sign in with 1Kosmos
   • Under Fields List, click Add and enter:

     • Property Name: email
     • Display Name: Email
   • Click Apply.
3. Select the 1Kosmos connector from the list and connect it to the flow.
4. Configure the 1Kosmos node:

   • Click Redirect to 1Kosmos
   • Under Query Parameters, click Add and enter:

     • Key: login_hint
     • Value: Select the email output variable from your HTML Form
   • Click Apply.

Step 5 — Test the Integration

1. Connect an HTTP connector to your 1Kosmos node and select the Custom HTML Message capability.
2. Configure the Custom HTML Message node:

   • Enter a Message Title such as Information
   • Under Message, select the 1Kosmos node output (object)
   • Click Apply.
3. Click the Play button at the top right to trigger the flow.
4. You will be redirected to the 1Kosmos login portal.
5. Log in using your 1Kosmos credentials — on success you will be redirected back to your target application.