Descope

Integration architecture

Mechanism A: Descope Connector

Built using Descope's connector SDK, a 1Kosmos connector would expose identity proofing and step-up verification as visual flow nodes.

Proposed Descope connector nodes:

Mechanism B: OIDC federation

1Kosmos configured as an external IdP within Descope's federation settings. Descope supports OIDC and SAML federation with external identity providers, allowing the proofing flow to be triggered via standard protocol redirect.

Mechanism C: Webhooks

Descope's event hooks (post-registration, pre-login) trigger 1Kosmos API calls. Descope supports webhooks for over 50 third-party tools, enabling real-time notifications about user activities that can trigger verification events.

Step-up verification flow

Descope's adaptive MFA creates risk-based verification paths. When a flow node evaluates contextual risk signals (new device, unfamiliar IP, geographic anomaly), the flow branches to a 1Kosmos LiveID step-up connector node. The biometric result feeds back into the Descope flow for downstream authorization.

Descope flow example:

[User Login] -> [Descope Authentication]
    -> [Risk Evaluation Node]
        -> IF new_device OR geo_anomaly OR sensitive_scope:
            -> [1Kosmos LiveID Step-Up]
            -> [1Kosmos Step-Up Result]
                -> IF match_result == true:
                    -> [Issue Tokens with ial=IAL2 claim]
                -> ELSE:
                    -> [Deny Access / Escalate]
        -> ELSE:
            -> [Standard Token Issuance]

[User Login] -> [Descope Authentication]
    -> [Risk Evaluation Node]
        -> IF new_device OR geo_anomaly OR sensitive_scope:
            -> [1Kosmos LiveID Step-Up]
            -> [1Kosmos Step-Up Result]
                -> IF match_result == true:
                    -> [Issue Tokens with ial=IAL2 claim]
                -> ELSE:
                    -> [Deny Access / Escalate]
        -> ELSE:
            -> [Standard Token Issuance]

[User Login] -> [Descope Authentication]
    -> [Risk Evaluation Node]
        -> IF new_device OR geo_anomaly OR sensitive_scope:
            -> [1Kosmos LiveID Step-Up]
            -> [1Kosmos Step-Up Result]
                -> IF match_result == true:
                    -> [Issue Tokens with ial=IAL2 claim]
                -> ELSE:
                    -> [Deny Access / Escalate]
        -> ELSE:
            -> [Standard Token Issuance]

Descope's no-code/low-code approach means customers can add or modify the step-up policy without engineering resources, reducing time-to-value from weeks to hours.