Descope

An external identity and access management platform that handles authentication, authorization, and user journey orchestration for customer-facing applications and AI agents, addressing password management, account takeover, and fragmented identity silos. It sells to developers, IT and security teams building B2B and B2C applications at startups to large enterprises. It is delivered as a SaaS platform with no-code visual workflows, SDKs, and REST APIs that integrate with existing frameworks and identity providers.

Key features

• Drag-and-drop visual auth workflows
• Passwordless authentication (passkeys, magic links)
• One-time passwords via email/SMS
• Social login integrations
• SAML and OIDC single sign-on
• Multi-factor authentication (MFA)
• Adaptive risk-based MFA
• Step-up authentication
• Biometrics and WebAuthn support
• Device fingerprinting
• Bot detection
• Secure session management
• User and tenant management
• SCIM provisioning
• Fine-grained authorization RBAC ReBAC ABAC
• Custom JWT attributes
• Identity federation across apps
• Customizable self-service admin widgets
• Third-party risk and fraud connectors