Descope

What it does

Descope is a customer identity and access management (CIAM) platform built around Descope Flows, a drag-and-drop visual workflow editor for designing registration, login, multi-factor authentication (MFA), and account recovery journeys without redeploying application code. The platform covers passwordless authentication, single sign-on (SSO), tenant management, and fraud prevention for external users, and extends the same identity layer to AI agents and Model Context Protocol (MCP) servers through its Agentic Identity Hub.

How it works

Applications integrate through client and backend SDKs, REST APIs, or hosted screens, and authentication journeys are assembled in Flows from screens, conditional branches, and third-party connectors that pull fraud, messaging, and analytics services into the journey. Risk-based multi-factor authentication (MFA) steps up authentication using device fingerprinting and external risk scores, while an identity federation broker connects SAML and OIDC applications and identity providers in any order. Multi-tenant user management adds SCIM provisioning and RBAC, ReBAC, and ABAC authorization, and the Agentic Identity Hub issues scoped, revocable tokens for AI agents and secures MCP servers with OAuth 2.1 and PKCE.

Credentials and traction

Descope is SOC 2 Type II and ISO 27001 certified, FedRAMP High authorized, CSA STAR Level 2 certified, and GDPR and HIPAA compliant. Thousands of organizations use the platform, including GoFundMe, Databricks, GoodRx, Navan, and Linktree, which migrated tens of millions of users to the platform. Named a Leader and Momentum Leader in G2's Spring 2026 reports, the platform targets consumer-facing and B2B software companies replacing legacy or in-house authentication.