Configuring 1Kosmos as an identity verification vendor in Epic

After creating your OIDC client and workflow, you will need to request a download of the 1Kosmos application in Epic. This can be done in parallel with the rest of set up. Reach out to your 1Kosmos representative for assistance. After 1Kosmos approves the application download, you will use the information provided within Epic complete the integration set up. For Epic’s documentation on adding identity verification for MyChart, see Toolbox ID Verification for MyChart.

For Epic’s documentation on adding identity verification for EpicCare Link, reach out to your Epic representative.

Client ID and client secret

These are generated when you create the OIDC client. You can find them in the application details page.

Well-known configuration URI

Navigate to Settings > General > Authorization Server

Your Well-Known Config URI will be formatted as: https://<yourtenant>.1kosmos.net/oauth2/community/default/.well-known/openid-configuration

Replace <yourtenant> with your actual tenant name.

Scopes

• openid
• profile
• identity_assurance
• idv_flow_[access_code]. Replace access_code with the access code generated during workflow creation.

Branding information

• Button Color: #5342FF
• Text Color: #FFFAF1
• Button Logo: 1Kosmos Logo

Expected user claims

After an identity verification, 1Kosmos returns the claims from the workflow back to MyChart. You configure how these claims are returned in the JSON snippet in your OIDC Client. For example, if you use the suggested JSON in Setting up an OIDC Client in 1Kosmos, the return might look like this:

{

"sub": "USERNAME",

"firstname": "FIRST_NAME",

"lastname": "LAST_NAME",

"birthdate": "BIRTHDATE",

"ssn": "SSN",

"at_hash": "AT_HASH_VALUE",

"aud": "AUDIENCE_VALUE",

"exp": EXPIRATION_TIMESTAMP,

"iat": ISSUED_AT_TIMESTAMP,

"iss": "ISSUER_URI"

}