SAML / OIDC SSO

Drag & drop SSO provider for your app

Create and modify SSO journeys with visual workflows.
Enable self-service SSO and SCIM setup for B2B customers.
Enforce SSO for enabled domains and support multi-SSO configs per tenant.
Seamlessly migrate existing SSO connections.

From scratch to SSO in 10 minutes

SSO, self-service setup, testing, attribute and group mapping, multiple IdPs per tenant...there's no SSO box we don't check.

B2B sample app

SSO sans struggle with Descope

B2B identity and access management

Add every flavor of external SSO

Easily support SAML and OIDC single sign-on for your app.
Add SSO for third-party and hosted apps by using Descope as an OIDC Provider.
Support customer orgs. that need multiple IdPs per tenant.
Use Descope as both IdP and SP, sometimes in the same flow.
Provide granular tenant-level access with RBAC and FGA.

SSO Setup Suite

B2B CIAM that turns admins into SSO superheroes

Generate self-service SSO and SCIM setup portals for each tenant.
Use prebuilt guides for 15+ IdPs with attribute and group mapping.
Let customer admins set up, manage, and test SSO connections entirely on their own.
Force domain verification through DNS checks for additional security and control.
Seamlessly migrate existing SSO connections with zero downtime.

Identity Federation

Achieve a 360 customer view across all your apps

Unify login experiences across disparate external-facing apps and IdPs.
Dynamically handle many-to-many identity relationships in workflows.
Personalize login experiences across hosted apps like Zendesk, Salesforce, Retool, Supabase, Shiny, Panel, and more.

SCIM Provisioning

Turn SCIM setup into a skim

Share self-service SCIM portals with guided or generic setup.
Provide multiple IdP configurations per tenant.
Map users, groups, and roles across IdPs and apps, including custom attributes.

"We love Descope SSO flows from a CX standpoint. A customer we onboarded just told us it was the fastest implementation ever. It usually takes weeks but we were done in 15 minutes - small talk included!"

David Li, Senior Software Engineer

Implement SSO your way

Flows

Use our no-code editor to create user-facing screens and SSO authentication flows for your app. Easily modify and update your flows from the Descope console as your user journey evolves.

SDKs

Use our SDKs to easily integrate SAML or OIDC SSO authentication into your app. Let us handle session management with Client SDKs or connect your app server to our service directly with Backend SDKs.

API

Use our REST APIs to implement SSO authentication for your app. Our clear documentation makes navigating and actioning the API a breeze.

What our customers say

“Whether it’s easily adopting passwordless methods like One Tap, adding risk-based MFA, or unifying identity flows across web and mobile apps, Descope provides workflow-based building blocks to help us achieve these goals much faster than before.”

Nitin Shingate, CTO

“Descope has been a great partner to our IAM team. We appreciate the simplicity of their product, the speed of innovation, and their active and responsive support. Whenever we launch a new application or user portal for external stakeholders, Descope is now the default auth provider in our minds.”

Naveen Zutshi, CIO

“Working with Descope was incredibly easy. We didn’t have to throw away our old system to get all the benefits of passwordless or SSO. Now, our team has new tools and Descope lets us keep the environment we’re comfortable with.”

Ashish Sarkar, CIO

David Li, Senior Software Engineer

“Visualizing the user journey as a workflow enables us to audit and modify the registration and authentication journey without making significant code changes.”

Arkadiy Goykhberg, CISO

"We needed a better provider who would actually pay attention to the platform and not just muscle people around. With the flexibility of the social auth, passkeys, everything Descope has—it was an easy drop-in for our authentication flow. ”

Brian Powell, VP of Engineering

“Flows helped us make API calls to the backend to check if a tenant had SSO enabled without relying solely on email domains. This gave our members more flexibility while maintaining security, something that would have been difficult with our previous system.”

Chad Dulake, Senior Software Engineer

“Descope met our needs and use case perfectly. The product is easy to deploy, we appreciate the SDK-level customization, and their team is super responsive to any enhancement suggestions.”

VP of Engineering, Media & Entertainment

“Our team really appreciates the empathetic and ever-present support. Whether it’s regular check-ins, guidance for unique use cases, or fast response and deployment for feature requests, we can see that Descope has our back.”

Marut Singh, CTO