Descope | 1Kosmos

1Kosmos Achieves DoW IL4 Authorization to Secure Military Identities and Mission Access

Descope

The Descope integration brings 1Kosmos IDV and LiveID step-up into Descope’s visual flow builder. Teams can add verified identity checks and biometric step-up as reusable flow nodes for CIAM use cases.

Integration type

Auth/IDP

Overview

Descope is a developer-first CIAM platform with a visual flow builder (Flows) and 50+ third-party connectors. Over 1,000 organizations use Descope, including GoFundMe, GoodRx, Databricks, Navan, 6Sense, and You.com.

What we solve

Modern CIAM deployments need to stop onboarding fraud and enforce step-up verification when risk changes, without forcing engineering teams to hard-code new flows for every policy update. This integration brings 1Kosmos IDV and LiveID step-up into Descope’s visual flow builder so teams can add verified identity checks and biometric step-up as reusable nodes, reducing time-to-value while improving protection against account takeover.

Integration architecture

Mechanism A: Descope Connector

Built using Descope's connector SDK, a 1Kosmos connector would expose identity proofing and step-up verification as visual flow nodes.

Proposed Descope connector nodes:

Node	Input	Output	Flow placement
1Kosmos IDV	document_types, liveness_mode	session_url, session_id	Post-registration, pre-provisioning
1Kosmos IDV Result	session_id	status, ial_level, verified_claims	After IDV redirect return
1Kosmos LiveID Step-Up	user_identifier	challenge_url, challenge_id	Conditional branch after risk evaluation
1Kosmos Step-Up Result	challenge_id	match_result, confidence	After step-up challenge completion

Mechanism B: OIDC federation

1Kosmos configured as an external IdP within Descope's federation settings. Descope supports OIDC and SAML federation with external identity providers, allowing the proofing flow to be triggered via standard protocol redirect.

Mechanism C: Webhooks

Descope's event hooks (post-registration, pre-login) trigger 1Kosmos API calls. Descope supports webhooks for over 50 third-party tools, enabling real-time notifications about user activities that can trigger verification events.

Step-up verification flow

Descope's adaptive MFA creates risk-based verification paths. When a flow node evaluates contextual risk signals (new device, unfamiliar IP, geographic anomaly), the flow branches to a 1Kosmos LiveID step-up connector node. The biometric result feeds back into the Descope flow for downstream authorization.

Descope flow example:

[User Login] -> [Descope Authentication]
    -> [Risk Evaluation Node]
        -> IF new_device OR geo_anomaly OR sensitive_scope:
            -> [1Kosmos LiveID Step-Up]
            -> [1Kosmos Step-Up Result]
                -> IF match_result == true:
                    -> [Issue Tokens with ial=IAL2 claim]
                -> ELSE:
                    -> [Deny Access / Escalate]
        -> ELSE:
            -> [Standard Token Issuance]

[User Login] -> [Descope Authentication]
    -> [Risk Evaluation Node]
        -> IF new_device OR geo_anomaly OR sensitive_scope:
            -> [1Kosmos LiveID Step-Up]
            -> [1Kosmos Step-Up Result]
                -> IF match_result == true:
                    -> [Issue Tokens with ial=IAL2 claim]
                -> ELSE:
                    -> [Deny Access / Escalate]
        -> ELSE:
            -> [Standard Token Issuance]

[User Login] -> [Descope Authentication]
    -> [Risk Evaluation Node]
        -> IF new_device OR geo_anomaly OR sensitive_scope:
            -> [1Kosmos LiveID Step-Up]
            -> [1Kosmos Step-Up Result]
                -> IF match_result == true:
                    -> [Issue Tokens with ial=IAL2 claim]
                -> ELSE:
                    -> [Deny Access / Escalate]
        -> ELSE:
            -> [Standard Token Issuance]

Descope's no-code/low-code approach means customers can add or modify the step-up policy without engineering resources, reducing time-to-value from weeks to hours.

Transform how you verify and authenticate

Secure onboarding, eliminate passwords, and stop fraud on one platform. Schedule a demo and see it in action.

Request a demo

Talk to sales

Transform how you verify and authenticate

Secure onboarding, eliminate passwords, and stop fraud on one platform. Schedule a demo and see it in action.

Request a demo

Talk to sales

Transform how you verify and authenticate

Secure onboarding, eliminate passwords, and stop fraud on one platform. Schedule a demo and see it in action.

Request a demo

Talk to sales