Recovering user accounts in Microsoft Entra

Microsoft Entra Account Recovery follows a structured, multi-step process. 1Kosmos powers the identity verification step at the core of this flow.

Step 1: Initiating account recovery in Entra

• The user loses access to their account and initiates account recovery in Microsoft Entra ID

• Microsoft redirects the user to 1Kosmos

Step 2: Verifying user identity

The user completes identity proofing using:

• Government-issued ID verification

• Biometric liveness detection

• 1:1 facial matching (selfie to ID comparison)

• Deepfake and injection attack detection

Step 3: Issuing the Verified ID

• 1Kosmos issues a Microsoft Verifiable Credential

• The Verifiable Credential is stored in the user's Microsoft Authenticator

• No sensitive personal data is exposed

Step 4: Restoring Access

• Microsoft validates the credential

• Microsoft issues the user a Temporary Access Pass

• The user re-enrolls authentication methods