Secure, fast, and truly passwordless.
Today's attackers have moved past breaking in. They either get hired, or they call IT asking for a reset. 1Kosmos Workforce closes and locks both doors with one verified identity: a new hire's government ID is matched to a live biometric, and every reset after requires that same face, whether it's a help desk call or self-service.
Between the hire and the reset, typing rhythm, facial presence, and device signals keep watching for a swap, a proxy, or a hijacked session. When something changes, 1Kosmos steps in before an imposter can turn access into an incident.
25
device, network, and threat signals scored in real time per session
3
automated responses when a session drifts: step up, restrict, or end
100%
of session events logged with timestamps and severity tags for audit
Follow a new hire through the KYE journey to see exactly what 1Kosmos Workforce verifies at each step.
Step/02
Interview
A LiveID check before each round confirms the applicant is on camera, not a proxy or deepfake.
Step/03
Offer
A government ID is matched to the same face, and US work eligibility is confirmed against that identity.
Step/03
Onboarding
The verified identity binds to the HR record and directory account before access is granted.
Step/05
Day 0
New hires sign in passwordless with LiveID or phrase + PIN. No initial password is ever sent.
Step/06
Ongoing & exit
Help desk resets require a LiveID match, and continuous signals flag any swap.
Use cases
Protect the moments attackers target
New hire screening
Verify new hires and contractors with IAL2-compliant identity proofing before any account is provisioned.
Help desk verification
Replace agent judgment with a government ID check and live biometric match that returns pass/fail in seconds.
MFA reset and recovery
Confirm a verified identity before agents or self-service portals reset passwords, MFA, or profiles.
Remote workforce verification
Give remote and hybrid teams secure access to VPNs, cloud apps, and corporate systems with verified identity.
Passwordless for frontline workers
Secure shared workstations without passwords, personal tokens, or smartphones, and cut hardware costs.
Drop it into your stack
1Kosmos Workforce plugs into the HR, IAM, and service desk tools you already run, so verification happens inside existing workflows.
IAM & MFA
Active Directory
Microsoft Entra ID
Okta
Ping Identity
HR & identity governance
Workday
ADP
SailPoint
Saviynt
Talent acquisition
Workday Recruiting
Ashby
Greenhouse
Help desk & ITSM
ServiceNow
Jira Service Management
Freshservice
BMC Helix
Threat detection
CrowdStrike Falcon
Microsoft Defender
SentinelOne
About Know Your Employee (KYE)
FAQs
KYE is the practice of verifying the real-world identity of every employee, contractor, and third party, then continuing to confirm it throughout employment. 1Kosmos Workforce verifies identity once at hire, then re-confirms the same person at interviews, onboarding, logins, and help desk resets.
A background check verifies a name and history on paper, not the person accepting the offer or logging in on day one. KYE binds a verified government ID to a live person, then keeps confirming that same person for the life of the account.
Both confirm that a real person stands behind an identity. KYC (Know Your Customer) does it for the customers a business serves, often to meet financial regulations, while KYE protects the workforce side: hiring, system access, and account recovery for employees, contractors, and third parties.
Candidates prove their identity using a government ID matched to a live biometric before the first interview, so stolen and synthetic identities fail at the start. During each interview, KYE confirms the face on camera is the applicant and detects deepfakes, virtual cameras, and stand-ins before the round ends.
Continuous authentication keeps verifying identity after login. KYE uses typing patterns, facial presence, and about 25 device and network signals to confirm the verified employee is still behind the session, triggering step-up auth or ending the session when risk rises.
Yes. 1Kosmos Workforce integrates with Active Directory, Microsoft Entra ID, Okta, Ping Identity, Workday, ADP, SailPoint, Saviynt, ServiceNow, CrowdStrike, and more, so verification runs inside the workflows you already have.
Biometrics are stored as an encrypted mathematical representation, never as a facial photo, inside your dedicated 1Kosmos environment. Document, biometric, and consent retention are configurable to your own policy and jurisdiction.




















