Saviynt - Identity Verification for Workflows

This topic explains how to connect 1Kosmos with Saviynt to initiate identity verification from within Saviynt Workflows.

The 1Kosmos integration on Saviynt Exchange enables organizations to embed identity proofing directly into Saviynt Identity Cloud workflows, strengthening identity assurance at critical access lifecycle events. By completing this integration, organizations close the "trust on first use" gap in IGA by ensuring that only verified individuals are onboarded or granted elevated access.

The setup involves configuring both a 1Kosmos tenant with IDV enabled and the Saviynt Universal Web Login (UWL) interface. Once configured, users are guided through a verification process whenever identity checks are required, initiated via an email or SMS link and completed using a government-issued ID and biometric selfie with liveness detection.

Use cases:

1. New Employee Onboarding

Organizations can verify new employees' identities as part of the Saviynt onboarding workflow. Users receive an email prompting them to verify their identity, complete document verification, and complete a liveness check through 1Kosmos, and are automatically approved in Saviynt upon success.

1. Contractor and Third-Party Onboarding

Using Saviynt's Third-Party Access Governance (TPAG) module, organizations can verify contractors, vendors, and partners before granting access to protected applications. The Saviynt workflow initiates a 1Kosmos proofing session, and access provisioning proceeds only after successful verification.

1. Risk-Based Re-Verification

Organizations can require users to re-verify their identity when risk conditions change, such as role escalation, privileged access requests, or flagged anomalous activity. Because 1Kosmos stores the initial identity record, re-verification does not require re-enrollment, reducing friction for legitimate users while maintaining assurance.