Introduction
Please read this entire article and follow its instructions before calling the Service Desk for assistance.
Michigan Medicine’s Third-Party Account Provisioning Policy requires that all vendors and contractors go through an identity proofing process and meet specific identity assurance level (IAL) requirements to receive a Michigan Medicine account. (Michigan Medicine uses 1Kosmos for this identity proofing process.)
The identity proofing process requires third parties to provide identification documentation that will be scanned and requires third parties to consent to the use of biometrics and sharing with Michigan Medicine personally identifiable information derived from the identification documentation. The Consent language is available here.
Terminology
Identity Assurance Level (IAL): IAL is in reference to the National Institute of Standards and Technology (NIST) guidance and defines how strongly a user’s identity is verified through the Identity Proofing process. This process ensures a higher degree of confidence that an individual is who they claim to be and is required when accessing Michigan Medicine systems, data, or functionality.
Identity Assurance Level 1 (IAL1): This is the default assurance level for a contractor or vendor affiliate whose information has not been verified when they begin the identity proofing process.
Identity Assurance Level 2 (IAL2): This is the assurance that confirms a contractor or vendor affiliate’s identity is verified using trusted evidence from external entities, such as government-issued identification or other authoritative data sources that is referenced through the identity proofing service. Once the contractor or vendor affiliate achieves IAL2 and provides consent to share data with Michigan Medicine, the Michigan Medicine account will be provisioned.
FAQ
Who is in scope for Identity Proofing?
Only contractor and vendor job codes submitted through the Account Request Tool (ART)
DO NOT use the 1Kosmos Mobile App
Michigan Medicine uses 1Kosmos' web wallet workflow which does not include the 1Kosmos mobile app. The affiliate must initiate document enrollment from a laptop or desktop web browser.
Pay special attention to the 1Kosmos username and password instructions on the Michigan Medicine Identity Proofing Tool
You may need to reach out to your Michigan Medicine contact (Access Liaison) to verify this information
Capturing selfie on a laptop or workstation
If using an external monitor and its camera, make sure to select the external monitor and click Allow from the dropdown list of cameras. Clicking Allow initiates the selfie process.
Using mobile device to scan and capture image of driver's license or passport
For better document scan success:
- Do not scan the ID on a cluttered background, a bedsheet, or a surface with patterns
- Make sure the lighting is sufficient to avoid shadows or glare
- Clean the camera lenses as smudges can cause blurry focus
- Make sure ID is not in a plastic sleeve like a wallet
Overview
Instructions
KB0033810 Michigan Medicine Identity Proofing Instructional Video
NOTE: DO NOT use the 1Kosmos mobile app
After your Access Liaison creates an internal request (or extends your appointment) for your Michigan Medicine account, you will receive an email from Michigan Medicine (Subject: Action Required: Identity Proofing Needed for Your Account) to begin the identity proofing process.
From a web browser (NOT the 1Kosmos mobile app), open the email and click the Michigan Medicine Identity Proofing Tool link in the email to navigate to the Michigan Medicine Identity Proofing Tool.
The Michigan Medicine Identity Proofing Tool displays.
The Michigan Medicine Identity Proofing Tool requires you to create a 1Kosmos account and log in, and provides two options for doing so. Both processes include a comparison of a selfie with the photo on an identity document:
- The LiveID option will use a selfie as part of the account creation and authentication process
- If you choose LiveID, follow the instructions in the LiveID section of this KB.
- The Credentials option will enable you to create the account and authenticate using a username and password.
- I you choose Credentials, follow the instructions in the Credentials section of this KB.
Click LiveID.
The Michigan Medicine Identity Proofing Tool instructs you to begin the identity proofing process by clicking the login link on the page. Click the link on the page to display the Michigan Medicine 1Kosmos Sign in page.
Note: Please note the username and password requirements, you may need to reach out to your Access Liaison (Michigan Medicine contact) to verify this information.
Enter your Username, then click on Next >.
Michigan Medicine 1Kosmos Sign in page refreshes with a Password field.
Enter your password, including dashes, then click on Next >.
The 1Kosmos Profile Information page will display.
Click on Login Options, then click on the Setup down arrow on the right side of the page and select LiveID Selfie.
Note: This step must be completed before submitting the two required identity documents.
The Enroll LiveID Selfie window displays. Click on the Capture Selfie button.
Your browser will open the Allow popup window. Important: If you are using an external monitor and its camera, please make sure to select the external monitor from the dropdown list of cameras. Click Allow to initiate the selfie process.
Note: Be sure to remove glasses, hats, headphones, etc. before taking the selfie.
Success! Your LiveID Selfie has been enrolled window displays.
Verify that your My LiveID Selfie is listed in Login Options.
After selecting Credentials, the Michigan Medicine Identity Proofing Tool page displays with a link. Click the link.
The Michigan Medicine 1Kosmos Sign in page displays.
Enter your Username, then click on Next >.
The Michigan Medicine 1Kosmos Sign in page refreshes with a Password field.
Enter your password, including dashes, then click on Next >.
The Michigan Medicine 1Kosmos Sign in page refreshes with options for authenticating. Click on one of the options; a verification code is sent to the selected option, and the Michigan Medicine 1Kosmos Sign in page refreshes with a field in which to enter the verification code that you received.
Enter the verification code; the page automatically refreshes and displays a user information page.
Next Steps for both LiveID and Credentials
Click on Identity Wallet.
For the next steps, Michigan Medicine requires one of the following combinations:
- Unexpired Driver’s License + Social Security Number, or
- Unexpired Passport + Social Security Number
Note: When deciding whether to use your Driver's License or Passport, select the most up-to-date document.
Note: If issues arise that prevent successful scanning of your documents, log out of the 1Kosmos site and communicate the issues with your Michigan Medicine representative (Access Liaison).
Note: If you do not have a US social security number, you can try to use your country's national identification.
Click Enroll on the tile of the type of identity document you would like to scan.
A Michigan Medicine Receive a link on your smartphone page will display. (Note: The smartphone device must have a camera and a browser.) Enter the phone number without dashes (Example: 7345551212) and click Continue.
You will receive a link on your smartphone.
Click the link on your smartphone and follow the prompts to scan your document. (It is helpful to place your document on a blank white sheet of paper before scanning. Be sure the background is on a clean flat surface, no background distractions/objects.)
After scanning your document, you will be instructed on taking to a selfie that will be compared with the photo on the document.
The information from your scanned document will display; click Continue.
Click Enroll on the Social Security Number tile.
Enter your Social Security Number without dashes.
The information linked to your social security number will display; click Continue.
The 1Kosmos portal page will display, including your IAL status in the upper left part of the page.
If you obtained IAL2, you will receive an email from Michigan Medicine to complete the Michigan Medicine account creation process; the email will have a Michigan Medicine Identity Proofing Tool link. Open the email and click the link to navigate to the Michigan Medicine Identity Proofing Tool.
If you did not obtain IAL2, your Access Liaison will be notified, and they will contact you to determine next steps.
From your computer, click Continue on the Michigan Medicine Identity Proofing Tool Information sharing consent page to see the information from 1Kosmos that will be shared with Michigan Medicine.
The Michigan Medicine Share Information Michigan Medicine Identity Proofing Tool window displays the information that you must consent to share with Michigan Medicine. Failure to consent prohibits you from receiving a Michigan Medicine account through this process. Click Approve to provide your consent.
Click the 1Kosmos Logout button to complete the identity proofing process and display the Michigan Medicine Sign in page.
Your identity proofing is complete. Follow up with your Access Liaison for next steps.