Infinite Campus

1Kosmos Achieves DoW IL4 Authorization to Secure Military Identities and Mission Access

Infinite Campus

Integration type

SIS (Student Info System)

What we solve

Infinite Campus districts need a secure way to verify staff identity during onboarding and to require step-up authentication for sensitive administrative actions (payroll, grade overrides, enrollment changes), because legacy SOAP-based access and basic SSO do not reliably confirm the administrator is the authorized individual. This integration supports both legacy SOAP and newer Cloud REST deployments—polling for new staff records, initiating 1Kosmos identity proofing, and using 1Kosmos as a SAML 2.0 IdP for biometric LiveID step-up—so districts can reduce fraud, protect student data, and strengthen auditability for high-risk actions.

Integration architecture

Authentication (legacy SOAP)

<envelope>
  <header>
    <security>
      <usernametoken>
        <username>{admin_user}</username>
        <password>{password}</password>
      </usernametoken>
    </security>
  </header>
  
    <authenticaterequest>
  
</authenticaterequest></envelope>

<envelope>
  <header>
    <security>
      <usernametoken>
        <username>{admin_user}</username>
        <password>{password}</password>
      </usernametoken>
    </security>
  </header>
  
    <authenticaterequest>
  
</authenticaterequest></envelope>

<envelope>
  <header>
    <security>
      <usernametoken>
        <username>{admin_user}</username>
        <password>{password}</password>
      </usernametoken>
    </security>
  </header>
  
    <authenticaterequest>
  
</authenticaterequest></envelope>

Returns a session token valid for 30 minutes.

Touchpoint 1 — Staff onboarding via Identity Service The Campus API Identity Service provides access to person records. 1Kosmos polls for new staff records:

<getpersonrequest>
  <personid>{PERSON_ID}</personid>
  <sessionid>{SESSION_TOKEN}</sessionid>
</getpersonrequest>

<getpersonrequest>
  <personid>{PERSON_ID}</personid>
  <sessionid>{SESSION_TOKEN}</sessionid>
</getpersonrequest>

<getpersonrequest>
  <personid>{PERSON_ID}</personid>
  <sessionid>{SESSION_TOKEN}</sessionid>
</getpersonrequest>

On retrieval of a new employee record, 1Kosmos initiates the IDV flow via email invitation.

Touchpoint 2 — Infinite Campus Cloud REST (newer deployments)

Touchpoint 3 — Step-up for administrative actions Infinite Campus uses SAML 2.0 for district SSO. 1Kosmos acts as a SAML IdP with step-up authentication capability. Administrators accessing payroll, grade override, or enrollment change functions are challenged with a biometric LiveID assertion.

Integration complexity: High (legacy SOAP), Medium (Cloud REST)

Session token expiry at 30 minutes requires careful token refresh logic. The newer Cloud REST API simplifies this significantly.

Transform how you verify and authenticate

Secure onboarding, eliminate passwords, and stop fraud on one platform. Schedule a demo and see it in action.

Request a demo

Talk to sales

Transform how you verify and authenticate

Secure onboarding, eliminate passwords, and stop fraud on one platform. Schedule a demo and see it in action.

Request a demo

Talk to sales

Transform how you verify and authenticate

Secure onboarding, eliminate passwords, and stop fraud on one platform. Schedule a demo and see it in action.

Request a demo

Talk to sales