Nacho
Descope IAM Provider
No-code visual flow builder for authentication journeys. FedRAMP High authorized. Drag-and-drop orchestration with a connector marketplace rivaling enterprise orchestration platforms at a fraction of the cost.
Features
- 🇺🇸US🇪🇺EU
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for OpenID Connect protocol-level compatibility across providers? Check out the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does Descope support Username and Password authentication method?
Descope supports Username and Password authentication method. Read more
Does Descope support Social Sign-in authentication method?
Descope supports Social Sign-in authentication method. Read more
Does Descope support Passkey authentication method?
Descope supports Passkey authentication method. Read more
Does Descope support Email Passwordless authentication method?
Descope supports Email Passwordless authentication method. Read more
Does Descope support Phone Passwordless authentication method?
Descope supports Phone Passwordless authentication method. Read more
Does Descope support Magic Link authentication method?
Descope supports Magic Link authentication method. Read more
Does Descope support Anonymous / Guest authentication method?
Descope supports Anonymous / Guest authentication method. Anonymous users issued a dedicated session JWT with a danu claim; seamlessly converted to full accounts on sign-up. Read more
Does Descope support Time-based One-Time Password (TOTP) MFA?
Descope supports Time-based One-Time Password (TOTP) MFA. Read more
Does Descope support HMAC-based One-Time Password (HOTP) MFA?
Descope does not support HMAC-based One-Time Password (HOTP) MFA. Not supported. Descope supports TOTP (time-based) and WebAuthn/passkeys but not counter-based HOTP. Read more
Does Descope support Universal 2nd Factor (U2F) MFA?
Descope supports Universal 2nd Factor (U2F) MFA. Supported via WebAuthn/FIDO2 implementation (hardware security keys). Read more
Does Descope support WebAuthn MFA?
Descope supports WebAuthn MFA. Read more
Does Descope support Email Code MFA?
Descope supports Email Code MFA. Read more
Does Descope support Phone Code MFA?
Descope supports Phone Code MFA. Read more
Does Descope support Recovery Code MFA?
Descope supports Recovery Code MFA. Recovery codes supported as a backup MFA method. Read more
Does Descope support Push Notification MFA?
Descope does not support Push Notification MFA. Not supported. Descope provides OTP, TOTP, passkeys, and magic links as MFA channels but does not offer push notification MFA. Read more
Does Descope support Adaptive / Risk-Based MFA MFA?
Descope supports Adaptive / Risk-Based MFA MFA. Risk-based MFA via conditional logic in Descope Flows. Available on Pro plan. Read more
Does Descope support Cisco Duo MFA?
Descope does not support Cisco Duo MFA. Descope provides native MFA orchestration. Cisco Duo is not listed as a supported connector or MFA integration. Read more
Does Descope support Step-Up Authentication MFA?
Descope supports Step-Up Authentication MFA. Step-up auth supported natively in Descope Flows. Read more
Does Descope support OpenID Connect (OIDC) integration protocol?
Descope supports OpenID Connect (OIDC) integration protocol. Read more
Does Descope support SAML 2.0 integration protocol?
Descope supports SAML 2.0 integration protocol. Read more
Does Descope support WS-Federation integration protocol?
Descope does not support WS-Federation integration protocol. Not supported. Descope supports OIDC and SAML 2.0 as federation protocols but not WS-Federation. Read more
Does Descope support Machine-to-Machine (M2M) Authentication integration protocol?
Descope supports Machine-to-Machine (M2M) Authentication integration protocol. M2M authentication available on Pro plan. Read more
Does Descope support OpenID Connect (OIDC) Federation identity federation?
Descope supports OpenID Connect (OIDC) Federation identity federation. Read more
Does Descope support SAML 2.0 Federation identity federation?
Descope supports SAML 2.0 Federation identity federation. Read more
Does Descope support Active Directory / LDAP identity federation?
Descope supports Active Directory / LDAP identity federation. LDAP connector authenticates users against an LDAP directory server (including Active Directory) using username/password or mutual TLS (mTLS). Requires the LDAP server to be internet-accessible. Read more
Does Descope support Azure Active Directory (Entra ID) identity federation?
Descope supports Azure Active Directory (Entra ID) identity federation. Microsoft Entra ID (Azure AD) SSO via SAML/OIDC, with SCIM provisioning support. Read more
Does Descope support Bulk User Import user management?
Descope supports Bulk User Import user management. Read more
Does Descope support Password Hash Import (Multiple Formats) user management?
Descope supports Password Hash Import (Multiple Formats) user management. Password hash import supported on Pro plan. Read more
Does Descope support Bulk User Export user management?
Descope supports Bulk User Export user management. Read more
Does Descope support Bulk User Update / Delete user management?
Descope supports Bulk User Update / Delete user management. Available via Management API. Read more
Does Descope support Upsert on Import user management?
Descope supports Upsert on Import user management. Read more
Does Descope support Legacy Username Import (Non-Allowed Characters) user management?
Descope supports Legacy Username Import (Non-Allowed Characters) user management. Read more
Does Descope support MFA Enrollment Import user management?
Descope does not support MFA Enrollment Import user management. Importing pre-existing MFA enrollments (e.g. TOTP secrets) is not supported. Users must re-enroll in MFA after migration. Read more
Does Descope support Inbound SCIM Provisioning user management?
Descope supports Inbound SCIM Provisioning user management. SCIM 2.0 provisioning available on Growth plan. Read more
Does Descope support Outbound SCIM Provisioning user management?
Descope does not support Outbound SCIM Provisioning user management. Descope only supports inbound SCIM (receiving provisioning from IdPs such as Okta and Azure). Outbound SCIM (pushing users from Descope to external directories) is not supported. Read more
Does Descope support SCIM Groups Provisioning user management?
Descope supports SCIM Groups Provisioning user management. SCIM group provisioning on Growth plan. Read more
Does Descope support Just-In-Time (JIT) User Provisioning user management?
Descope supports Just-In-Time (JIT) User Provisioning user management. Read more
Does Descope support Lazy / Trickle Migration from Legacy Database user management?
Descope supports Lazy / Trickle Migration from Legacy Database user management. Zero-downtime user migration available on Pro plan. Read more
Does Descope support Self-Service Profile Management Portal user management?
Descope supports Self-Service Profile Management Portal user management. Read more
Does Descope support User Account Linking user management?
Descope supports User Account Linking user management. Read more
Does Descope support User Blocking / Banning user management?
Descope supports User Blocking / Banning user management. Read more
Does Descope support User Metadata user management?
Descope supports User Metadata user management. Read more
Does Descope support Application Metadata user management?
Descope supports Application Metadata user management. Read more
Does Descope support Metadata Size Limits user management?
Descope supports Metadata Size Limits user management. 20KB per object. Read more
Does Descope support User Search user management?
Descope supports User Search user management. Read more
Does Descope support Role-Based Access Control (RBAC) user management?
Descope supports Role-Based Access Control (RBAC) user management. Roles and permissions available on Pro plan. Read more
Does Descope support Organizations (Multi-Tenancy B2B) user management?
Descope supports Organizations (Multi-Tenancy B2B) user management. Native multi-tenant model with tenants and organization management. Read more
Does Descope support Password Strength Policies user management?
Descope supports Password Strength Policies user management. Read more
Does Descope support Username Restrictions user management?
Descope supports Username Restrictions user management. Read more
Does Descope support Progressive Profiling / Forms user management?
Descope supports Progressive Profiling / Forms user management. Progressive profiling via Flows builder — collect additional data at any step. Read more
Does Descope support Attribute-Based Access Control (ABAC) access control?
Descope supports Attribute-Based Access Control (ABAC) access control. Attribute-based authorization available on Growth plan. Read more
Does Descope support Fine-Grained Authorization (FGA / ReBAC) access control?
Descope supports Fine-Grained Authorization (FGA / ReBAC) access control. Fine-grained authorization via relationship-based access control on Growth plan. Read more
Does Descope support API Authorization (Scopes / Permissions) access control?
Descope supports API Authorization (Scopes / Permissions) access control. API authorization with scopes and permissions on Pro plan. Read more
Does Descope support Audit Log Retention security feature?
Descope supports Audit Log Retention security feature. Audit logs available on Pro plan. Read more
Does Descope support Audit Log Streaming security feature?
Descope supports Audit Log Streaming security feature. Log streaming to external systems on Growth plan. Read more
Does Descope support Security Center (Threat Monitoring Dashboard) security feature?
Descope supports Security Center (Threat Monitoring Dashboard) security feature. Read more
Does Descope support Encryption at Rest security feature?
Descope supports Encryption at Rest security feature. Read more
Does Descope support Encryption in Transit security feature?
Descope supports Encryption in Transit security feature. Read more
Does Descope support Customer Managed Keys (BYOK) security feature?
Descope supports Customer Managed Keys (BYOK) security feature. Read more
Does Descope support Bot Detection security feature?
Descope supports Bot Detection security feature. Read more
Does Descope support Brute Force Protection security feature?
Descope supports Brute Force Protection security feature. Read more
Does Descope support Suspicious IP Throttling security feature?
Descope supports Suspicious IP Throttling security feature. Read more
Does Descope support Breached Password Detection security feature?
Descope supports Breached Password Detection security feature. Read more
Does Descope support Credential Guard (Dark Web Monitoring) security feature?
Descope does not support Credential Guard (Dark Web Monitoring) security feature. No Auth0-style credential guard feature. Descope offers breached password detection via the Have I Been Pwned connector. Read more
Does Descope support Tenant Access Control List (IP ACL) security feature?
Descope does not support Tenant Access Control List (IP ACL) security feature. No dedicated tenant ACL (access control list) feature for restricting traffic to tenants. Access control is managed via RBAC and tenant-level roles. Read more
Does Descope support Device Fingerprinting security feature?
Descope supports Device Fingerprinting security feature. Device fingerprinting for risk-based decisions. Available on Pro plan. Read more
Does Descope support Per-Organization Branding multi-tenancy?
Descope supports Per-Organization Branding multi-tenancy. Per-tenant branding on Pro plan. Read more
Does Descope support Per-Organization MFA Policy multi-tenancy?
Descope supports Per-Organization MFA Policy multi-tenancy. Per-tenant MFA policies on Pro plan. Read more
Does Descope support Hosted / Universal Login Page branding feature?
Descope supports Hosted / Universal Login Page branding feature. Read more
Does Descope support Embedded / Native Login Components branding feature?
Descope supports Embedded / Native Login Components branding feature. Embeddable Descope web components and React/Vue/Angular SDKs. Read more
Does Descope support White-Label / Full Brand Removal branding feature?
Descope supports White-Label / Full Brand Removal branding feature. Full white-labeling on Pro plan. Read more
Does Descope support Localization / i18n branding feature?
Descope supports Localization / i18n branding feature. Read more
Does Descope support Prebuilt UI Components (SDK) branding feature?
Descope supports Prebuilt UI Components (SDK) branding feature. Descope Flow components for React, Vue, Angular, and Web Components. Read more
Does Descope support Login / Auth Analytics Dashboard analytics?
Descope supports Login / Auth Analytics Dashboard analytics. Authentication analytics dashboard available on all paid plans. Read more
Does Descope support SOC 2 Type II Certification compliance?
Descope supports SOC 2 Type II Certification compliance. Read more
Does Descope support ISO 27001 / 27017 / 27018 Certification compliance?
Descope supports ISO 27001 / 27017 / 27018 Certification compliance. Read more
Does Descope support HIPAA Business Associate Agreement (BAA) compliance?
Descope supports HIPAA Business Associate Agreement (BAA) compliance. Read more
Does Descope support PCI DSS Compliance compliance?
Descope supports PCI DSS Compliance compliance. Read more
Does Descope support CSA STAR Certification compliance?
Descope supports CSA STAR Certification compliance. CSA STAR Level 2 certified. Read more
Does Descope support FedRAMP Authorization compliance?
Descope supports FedRAMP Authorization compliance. FedRAMP High authorized, making Descope suitable for US federal government use cases. Read more
Does Descope support GDPR: Data Export (Portability) compliance?
Descope supports GDPR: Data Export (Portability) compliance. Read more
Does Descope support GDPR: Right to be Forgotten (User Deletion) compliance?
Descope supports GDPR: Right to be Forgotten (User Deletion) compliance. Read more
Does Descope support Consent Management compliance?
Descope supports Consent Management compliance. Consent management available on Growth plan. Read more
Does Descope support Region Deployment compliance?
Descope supports Region Deployment compliance. Data residency in US and EU regions available on Growth plan. Read more
Does Descope support Private Cloud Deployment compliance?
Descope supports Private Cloud Deployment compliance. Read more
Does Descope support SDK Coverage developer integration?
Descope supports SDK Coverage developer integration. SDKs for React, Vue, Angular, React Native, iOS, Android, Node.js, Python, Go, and more. Read more
Does Descope support Management API developer integration?
Descope supports Management API developer integration. Read more
Does Descope support Authentication API Rate Limits developer integration?
Descope supports Authentication API Rate Limits developer integration. Read more
Does Descope support Actions / Extensibility Pipeline developer integration?
Descope supports Actions / Extensibility Pipeline developer integration. Connector marketplace within Flows for triggering external actions at any step. Read more
Does Descope support TypeScript Support in Extensibility developer integration?
Descope supports TypeScript Support in Extensibility developer integration. TypeScript connectors and function hooks supported. Read more
Does Descope support Custom Domain developer integration?
Descope supports Custom Domain developer integration. Custom domain on Pro plan. Read more
Does Descope support Deploy CLI (Infrastructure as Code) developer integration?
Descope supports Deploy CLI (Infrastructure as Code) developer integration. Descope CLI (descopecli) supports project snapshot export/import/validate, flows management, user/tenant operations, and CI/CD integration. Read more
Does Descope support Terraform Provider developer integration?
Descope supports Terraform Provider developer integration. Read more
Does Descope support Custom Database Connections developer integration?
Descope supports Custom Database Connections developer integration. Custom database connectors via the Flows connector marketplace. Pro plan. Read more
Does Descope support Native Webhook Support developer integration?
Descope supports Native Webhook Support developer integration. Read more
Does Descope support Universal Login / Hosted Login Page Customization developer integration?
Descope supports Universal Login / Hosted Login Page Customization developer integration. Read more
Does Descope support Custom Email Provider (SMTP) developer integration?
Descope supports Custom Email Provider (SMTP) developer integration. Custom SMTP and email provider via connectors. Read more
Does Descope support Email Templates developer integration?
Descope supports Email Templates developer integration. Read more
Does Descope support Custom OIDC Claims / Token Enrichment developer integration?
Descope supports Custom OIDC Claims / Token Enrichment developer integration. Custom claims added to JWTs via the Custom Claims action in Flows or JWT templates. Supports the descope.custom_claims scope in OIDC applications. Read more
Does Descope support No-Code Auth Flow Builder / Orchestration feature?
Descope supports No-Code Auth Flow Builder / Orchestration feature. Descope Flows — visual drag-and-drop authentication journey builder. Available on Free plan. Read more
Does Descope support Identity Verification / Document Proofing feature?
Descope does not support Identity Verification / Document Proofing feature.
Does Descope support Decentralized / Verifiable Credentials feature?
Descope does not support Decentralized / Verifiable Credentials feature.
Does Descope support Built-in Billing / Subscription Management feature?
Descope does not support Built-in Billing / Subscription Management feature.
Does Descope support Agentic AI / MCP Server Authentication feature?
Descope supports Agentic AI / MCP Server Authentication feature. MCP server authentication for AI agents on Pro plan. Read more
Does Descope support Post-Quantum Hybrid TLS Key Exchange post-quantum cryptography feature?
Descope partially supports Post-Quantum Hybrid TLS Key Exchange post-quantum cryptography feature. No public vendor statement on PQC TLS support found. Descope's public API (api.descope.com) responds with 'server: cloudflare', a cf-ray header, and a __cf_bm (Cloudflare Bot Management) cookie, indicating Descope's API is fronted by Cloudflare. Cloudflare enabled hybrid PQC key exchange by default for TLS 1.3 in 2023-2024, but this is infra-inherited, not a documented Descope-specific commitment. Read more
Does Descope support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature?
Descope does not support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature. No public evidence found that Descope supports ML-DSA, SLH-DSA, or FN-DSA for JWT, SAML, or OIDC signing. Descope's documented signing algorithms are conventional (RS256/ES256 family).
Does Descope support Post-Quantum Token & Data Encryption post-quantum cryptography feature?
Descope does not support Post-Quantum Token & Data Encryption post-quantum cryptography feature. No public evidence found that the provider supports ML-KEM or HPKE (RFC 9180) for encrypting JWE tokens, SAML assertions, or user secrets.
Does Descope support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature?
Descope does not support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature. No public evidence found of post-quantum or hybrid X.509 digital certificate support for mTLS client authentication or federation endpoints.
Does Descope support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature?
Descope does not support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature. No public evidence found of NIST SP 800-208 stateful hash-based signature scheme support (LMS/HSS, XMSS).
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.