This page focuses on Descope's OpenID Connect protocol support. Looking for Descope’s (C)IAM features like MFA, SSO, and user management? View Descope on the (C)IAM Identity Providers benchmark.

Descope OpenID Connect Provider

No-code visual flow builder for authentication journeys. FedRAMP High authorized. Drag-and-drop orchestration with a connector marketplace rivaling enterprise orchestration platforms at a fraction of the cost.

Frequently Asked Questions

Does Descope support the Authorization Code grant type?

Descope supports Authorization Code grant type.

Does Descope support the Refresh Token grant type?

Descope supports Refresh Token grant type.

Does Descope support the Client Credentials grant type?

Descope supports Client Credentials grant type. Inbound Apps and OIDC federated apps.

Does Descope support the Token Exchange grant type?

Descope supports Token Exchange grant type. RFC 8693, gated by policies on Inbound Apps.

Does Descope support the Client Initiated BackChannel Authentication grant type?

Descope supports Client Initiated BackChannel Authentication grant type. Inbound Apps, confidential clients only. Off by default.

Does Descope support the Device Authorization Grant grant type?

Descope supports Device Authorization Grant grant type. Documented for OIDC federated apps.

Does Descope support the JWT Bearer Token grant type?

Descope supports JWT Bearer Token grant type. Inbound Apps, confidential clients only. Off by default.

Does Descope support the PKCE extension?

Descope supports PKCE extension.

Does Descope support the Authorization Endpoint endpoint?

Descope supports Authorization Endpoint endpoint.

Does Descope support the Token Endpoint endpoint?

Descope supports Token Endpoint endpoint.

Does Descope support the UserInfo Endpoint endpoint?

Descope supports UserInfo Endpoint endpoint.

Does Descope support the Token Revocation endpoint?

Descope supports Token Revocation endpoint.

Does Descope support the Token Introspection endpoint?

Descope supports Token Introspection endpoint. Documented for OIDC federated apps.

Does Descope support the OpenID Connect Discovery Endpoint endpoint?

Descope supports OpenID Connect Discovery Endpoint endpoint.

Does Descope support the none token endpoint authentication method?

Descope supports none token endpoint authentication method. Public clients using PKCE.

Does Descope support the client_secret_basic token endpoint authentication method?

Descope supports client_secret_basic token endpoint authentication method.

Does Descope support the client_secret_post token endpoint authentication method?

Descope supports client_secret_post token endpoint authentication method.

Does Descope support the none prompt?

Descope supports none prompt. Silent authentication while the user has an active Descope session.

Does Descope support the RP-initiated Logout feature?

Descope supports RP-initiated Logout feature. The /oauth2/v1/logout endpoint of OIDC federated apps.

Does Descope support the Dynamic Client Registration Protocol feature?

Descope supports Dynamic Client Registration Protocol feature. Through MCP Server configuration. Inbound Apps no longer configure it directly.