Descope is a drag-and-drop customer identity and access management (CIAM) platform. Our no / low code CIAM solution helps organizations easily create and customize their entire user journey using visual workflows – from authentication and authorization to MFA and federated SSO. Descope serves technology, identity, and security leaders at organizations across industries and size, from early-stage startups to large enterprises. Hundreds of organizations including GoFundMe, Navan, You.com, and Branch use Descope to improve their user onboarding experience, prevent account takeover attacks, and get a 360-degree view of their customer journey. Descope also provides a connector ecosystem with dozens of third-party services for use cases such as identity verification, fraud prevention, risk-based authentication, and identity orchestration. Descope is built on a scalable multi-tenant architecture with high availability that can support sudden traffic spikes and advanced B2B enterprise requirements. Descope product capabilities are listed below: 1. No / Low Code Workflows - Use a visual workflow interface to create and customize user journeys including signup, login, MFA, SSO, and step-up. - Govern frontend experience and backend logic in the same workflow for a seamless dev and end user experience. - Easily design user-facing screens that align with your brand. - Choose from 100+ out-of-the-box flows with endless customization options. - Make changes to your authentication without redeploying your app or touching your codebase. 2. Customer Authentication and Authorization - Native support for all major authentication methods: passwords, social login, email and SMS OTP, magic links, passkeys, authenticator apps, etc.. - Strong SSO support for SAML and OIDC. - Add fine-grained authorization controls to your app (RBAC, ReBAC, ABAC). 3. Flexible User Management - End-to-end self-service SSO configuration including provisioning, group and attribute mapping, IdP selection, domain names, and testing. - Dynamic federated SSO across disparate apps and IdPs. - SCIM user provisioning and deprovisioning. - A / B test user journeys by splitting user traffic. - Empower end users with self-service widgets for user, role, and access key management, auditing, and user profiles. 4. Connectors Ecosystem - Bidirectional integrations with dozens of third-party services to enrich and secure user journeys. - Generic HTTP connector to enable a wide variety of use cases. - Other use cases: risk-based MFA, identity verification, localization, identity orchestration, and audit streams. 5. Security and ATO Protection - Add adaptive MFA to your authentication flow by checking a variety of risk factors: new device, VPN, impossible traveler, etc. - Utilize risk signals from third-party services like reCAPTCHA. - Strengthen password security with Have I Been Pwned breached password detection. - Secure session and token management with refresh token rotation. - Identify and mitigate bot attacks on your login pages. - Strong passkey support with autofill and cross-device flows. 6. Infrastructure and Monitoring - Scalable multi-tenant architecture with high availability designed to support advanced enterprise requirements. - Multiple implementation for developers: no-code workflows, Client and Backend SDKs, and REST APIs. - Detailed audit trails and user analytics including active users, device statistics, time data, and errors. - Multi-region data residency complaint with all major data regulations.