Descope

@descope.com

55 Followers 23 Following

⚡ Drag & Drop CIAM. Add AuthN, AuthZ, MFA, SSO, bot protection, and a whole lot more to your app with no / low code workflows. 👉 www.descope.com

Descope Auth Thoughts June 2026
An underwater photograph showing a person from behind, wearing scuba or skin diving gear. The person is wearing a black long-sleeved rash guard featuring the white text descope with a blue icon inside the letter o, and the tagline Drag And Drop Your Auth printed underneath. They are also wearing black diving pants with blue accents. The individual has their arms bent at the elbows, pointing both index fingers inward toward their head or the logo on their shirt. Small air bubbles rise to the right of their head in the clear blue water. In the distant background, the blurry vertical structure of an underwater shipwreck or reef wall is faintly visible.
Add ReBAC without rebuilding AuthZ
An event promotional graphic titled Join one of our sessions! from the file Identiverse 2026 sessions Social.jpg, set against a dark blue background with abstract glowing light lines. The top corners feature the logos for descope on the left and identiverse on the right. The graphic lists four session blocks stacked vertically, each enclosed in a rounded rectangle with a glowing blue border: The first session is titled Tackling the Identity Alphabet Soup of NHI, M2M, and MCP, scheduled for Monday, June 15 at 7:30 pm in the NHAI Theater. The second session is titled Master Class: Identity Tips to Secure AI Agents and MCP Servers for the Enterprise, scheduled for Wednesday, June 17 at 10:30 am in Breakers J. The third session is titled Identity Tips to Improve User Onboarding and Conversion, scheduled for Wednesday, June 17 at 2:35 pm in Breakers J. The fourth session is titled Tips to Simplify B2B2X Identity Complexity, scheduled for Wednesday, June 17 at 4:30 pm in Breakers J. At the bottom left, text states Presented by: Rishi Bhargava, Descope Co-Founder. In the bottom right corner, a photo shows Rishi Bhargava speaking into a microphone while gesturing with his left hand.
Descope Policies
Credential vault
Cloud-neutral agent directory
An infographic titled AI Agents and Agentic Identity Hub from the file Descope Agentcore AI Foundry Vertex Image Compressed.png, set against a dark blue gradient background. On the left side, under the heading AI Agents, three platform logos and names are stacked vertically: Amazon AgentCore, Azure AI Foundry, and Google Vertex AI. White arrows curve outwards from a single point to connect these three platforms to a central dark container on the right side. The central dark container is labeled Agentic Identity Hub and features the Descope logo. It lists three capabilities stacked vertically: Cloud-neutral agent directory, Token vault for downstream services, and Policy engine for per-task access. The descope logo is also positioned in the top right corner of the image.
A screenshot of a user interface window titled Edit rule from the file enhanced access policy 2.jpg. The interface features a dark mode theme and is used to define who can get which scopes from which targets. Under the Targets section, there are two toggle buttons for Resources and Connections, with Resources selected. Below this, the Specified radio button is selected instead of Any. A blue information banner shows 1 resources selected and notes Scopes: per resource — pick Any or Specified for each, with an Edit link on the right. Under the Grant types section, three options are listed with checkboxes. The first option is Delegated access (token exchange), described as Exchange one token for another to act on behalf of a user or downstream service. The second option is Machine-to-Machine (M2M) access, described as Client credentials flow, where a service authenticates as itself with no user involved. The third option, which is checked, is User access, described as Authorization code flow, where a person logs in and provides consent. At the bottom left, there is a Cancel link, and at the bottom right, there is a blue Save button.
An infographic titled Descope Policies from the file Descope Policies Image (2).png, set against a dark blue gradient background. A central dark container features the Descope logo and the heading Take context from, followed by four items arranged in a two-by-two layout: User / tenant, Resource, Agent / MCP server, and Downstream service. Double-headed arrows point outward from the central container to components on both sides. On the left side, there are two icons labeled OAuth Clients and AI Agents. On the right side, there are two icons labeled Connections with the subtitle Google Calendar, Zoom, etc., and Resources with the subtitle MCP endpoints, APIs, etc. The descope logo is positioned in the bottom right corner.
A testimonial image titled You.com AI quote.jpg features a quote from Saurabh Sharma, CPO, set against a dark blue background with a descope logo in the bottom right corner. The text is enclosed in a dark container with a light blue quotation mark icon at the top left. The quote reads: "By unifying our user and MCP identity under Descope, we have an identity system that aligns with the unique security and experience needs of businesses, individuals, and AI agents. Our MCP server is protected by OAuth 2.1 with secure client registration and token management—all without rewiring our backend APIs." Below the quote, the name Saurabh Sharma, CPO is displayed in light blue text, followed by a white you.com logo and text.
An n8n workflow diagram from the file n8n config 1.png, set against a light gray dotted grid background. The diagram shows a horizontal sequence of three nodes connected by green arrows, with each connection indicating 1 item. The first node on the left has a green outline and features a hand cursor icon, labeled Start. The middle node also has a green outline and features a blue globe icon, labeled Fetch Descope OAuth Token. Below this node, there is truncated text that reads POST: https://api.descope.co... Both the first and second nodes display a small green checkmark in their bottom right corners. The third node on the right has a light gray outline and features a black squiggly line icon, labeled MCP Client.
An architectural block diagram from the file Identity for autonomous agents.png, illustrating the flow of identity management for various types of agents through a central system. On the left, three purple input boxes represent different agent configurations: MCP client (user delegated or autonomous agents), Autonomous agent (no user), and Delegated agent (w/ a user JWT). Arrows from these three boxes point to a central green box labeled Descope Agentic Identity Hub. From the central hub, the process splits into two distinct paths to the right. The top path sends a resource token to a gray box labeled Resource MCP server or API. The bottom path performs an exchange with a gray box labeled Connections Vault API keys or OAuth. This vault then passes an API key / OAuth credential to a final gray box labeled Backend API needs an API key.
Identity for autonomous agents
An infographic titled API vs OAuth from the file API_vs_OAuth__1_.png, set against a dark blue gradient background. The image is split down the center to compare the access levels of an API key versus OAuth authentication. On the left side under the heading API, a hardcoded key is shown as API_KEY = "1234567890ABCDEF". Two blue warning icons highlight that this method provides Full access to data and Full access to account. On the right side under the heading OAuth, a stylized permissions pop-up window is shown for an application called Calendar Agent. The window states Calendar Agent would like to: Read your calendar events, followed by a green Approve button and a blue Deny button. The descope logo is positioned in the top right corner.
AI agent credential management best practices.
An infographic titled Why organizations are adopting passkeys from the file image_3bfb41.png, set against a white dotted grid background. The text explains that the FIDO report captures enterprise-focused motivations driving passkey adoption for the workforce among 1,202 organizations. It presents a list of top reasons for upgrading, each preceded by a blue asterisk icon: Phishing and multi-factor authentication (MFA) fatigue protection (39%) Strengthening and phishing-resistant authentication (37%) Digital modernization (36%) Improving employee login speed and user experience (34%) Improving experience for remote or distributed workers (32%) Compliance and regulatory requirements (31%) Reducing helpdesk costs from password resets (25%)
An infographic titled Early movers are seeing returns from the file image_3bf73f.png, set against a white dotted grid background. The text states that among organizations that have begun their passkey rollout for the workforce, the reported outcomes show impressive gains. It presents a list of outcomes, each preceded by a blue asterisk icon: 47% report improved security confidence and overall security posture 45% report faster employee login times 43% report improved employee satisfaction scores regarding IT 35% report a reduction in helpdesk tickets for password resets 32% report a reduction in phishing-related incidents 31% report reduced reliance on legacy MFA methods
An infographic titled Passkeys in 2026 from the file Passkeys 2026 stats (1).png, set against a dark blue gradient background. The image displays three key statistics in a horizontal row. The first statistic is 90% with the description Consumer awareness of passkeys. The second statistic is 75% with the description Enable passkeys on at least some accounts. The third statistic is 40% with the description Enable passkeys on most of their accounts. At the bottom center, it notes the source as Source: FIDO Alliance, State of Passkeys 2026. The descope logo is positioned in the bottom right corner.
Auth Thoughts May 2026
Descope Admin Portal
An infographic titled MCP Identity Orchestration on a dark blue gradient background. A central dark box labeled Identity Orchestration features the Descope logo and lists four capabilities: Consent Management, Multi-tenant Routing, Scope-Aware Step-Up Auth, and Enrich JWT Claims. To the left, an icon labeled Authorization connects to the central box with a double-headed arrow. To the right, an icon labeled Token Issuance also connects to the central box with a double-headed arrow. The descope logo is in the bottom right corner.
An illustration of a text message conversation between Mom and her child. The conversation begins with Mom asking, "Hi dear where is my notebook with all the passwords." The child replies, "Mom, I’ve told you not to write down your passwords in a notebook." Mom responds with three separate messages: "Its okay," "I logged in," and "The password was your birthday." The messages are displayed in a stylized chat window with a light beige background, set against a purple backdrop. Mom's profile picture is a bouquet of pink tulips.
A meme featuring a scene from Star Wars where Darth Vader is using a Force choke on an Imperial officer. Darth Vader is labeled with the text I FIND YOUR LACK OF MCP AUTH DISTURBING. The officer being choked is labeled DEV USING MCP SERVER WITH HARDCODED API KEYS.
Enterprise-Ready MCP in Minutes With Descope and Render
An infographic titled Passkeys and Step-Up Auth on a dark blue gradient background. It lists three key benefits: Fast, described as a quick biometric touch or face scan; Phishing-Resistant, noted as having no credentials to steal; and Device-Bound, defined as possession and inherence combined. Each benefit is accompanied by a simple icon—a play button for speed, a fishing rod for phishing resistance, and a laptop for device binding. The descope logo is in the bottom right corner.
An infographic titled IT / Developer Admin Overhead on a dark blue gradient background. A central icon labeled Your Engineering / IT Teams is surrounded by five user icons with dashed lines pointing toward the center. Each line represents a manual task: I need to change my password, I am stuck while setting up my SSO configuration, Can you reset my MFA?, Can you send me the last seven days audit logs?, and Can you disable these two users? The descope logo is in the top right corner.
A comparison table titled MCP multi-tenant scaling solutions compared on a white grid background. The table compares four architectures—Single server, Per-tenant servers, Gateway without IdP, and Gateway with IdP—across five key categories: Tenant isolation: Ranges from Token-level for a single server to Gateway + identity for a gateway with IdP. Identity management: Ranges from routing logic living in app code for a single server to one control plane managing all configurations for a gateway with IdP. Credential isolation: Ranges from your code deciding which credential to use to each tenant's downstream credentials being stored and resolved in isolation. Consent customization: Options include Uniform, Per-server, Not addressed, and Per-tenant flows. Operational scaling: Ranges from Low overhead, limited flexibility to a model where both routing and identity scale together.
A two-panel meme based on the "Daily Struggle" format. In the top panel, a hand hesitates over three red buttons labeled BUILD AN MCP GATEWAY, BUY AN MCP GATEWAY, and THINK FIRST. The bottom panel shows a man labeled MCP DEVELOPERS sweating profusely and wiping his forehead with a cloth, appearing stressed and overwhelmed by the choice.
LED truck with a Descope ad saying "Auth for your AI agents and MCP servers" in front of the Moscone Center
An image titled Time to Value on a dark blue gradient background with the Descope logo in the top right corner. The center of the image features four separate customer testimonials, each accompanied by a five-star rating. The testimonials state: "It was very easy to use and implement. After the initial configuration, integrating additional applications with Descope authentication was straightforward and required little effort." "Descope is more approachable and intuitive than a lot of other products we evaluated." "Flows have also been genuinely helpful for us: our login page is powered through a Flow, and even without heavy customization it’s been easy to make quick changes and iterate without much engineering effort." "What’s most helpful is how fast and easy it is to set up. My users have a smooth experience, and I can focus on building features instead of dealing with authentication headaches." A white circular button with a black right-facing arrow is located in the bottom right corner.
An image on a dark blue gradient background featuring the Descope logo at the top. Glowing light blue text in the center reads, "Featured in 74 G2 Fall Reports in Spring 2026". Below the text are four G2 award badges for Spring 2026: Leader Momentum Leader Best Support High Performer A white circular button with a black right-facing arrow is located in the bottom right corner.
An image featuring a testimonial quote on a dark blue gradient background. A light blue quotation mark icon is in the top left corner of a dark box. The quote within the box reads: “Descope helps us provide a “single front door” access experience to each tenant while catering to bespoke requirements—from SSO onboarding and login screens to auth and access control methods. Our customer authentication now feels as cutting-edge as our products are.” Below the quote, the text identifies the speaker as Ameya Ambardekar, SVP of Engineering. The Collabrios Health logo is placed at the bottom of the central box, and the Descope logo is in the bottom right corner of the entire image.
A screenshot of a Linktree login interface, split vertically between a login form on the left and a lifestyle collage on the right. The left side features the Linktree logo in the top corner and the text "Welcome back" above a login form. The form includes an "Email or username" input field, a black "Continue" button, and options to "Continue with Google" or "Continue with Apple." Links for "Forgot password?", "Forgot username?", and "Sign up" are located at the bottom. The right side shows a person in a blue quilted jacket and beige beanie against a blue and lime green background. Overlaid elements include a video snippet of a beach, social media icons for Instagram, YouTube, and Spotify, a floating white sneaker, and a product tile for "Salt & Stone" priced at $36.
An image featuring a testimonial quote on a dark blue gradient background. A light blue quotation mark icon is in the top left corner of a dark box. The quote within the box reads: “We were skeptical about Descope Flows at first. Many dev-focused tools can limit velocity for more experienced teams. But when we saw how fast it can move, without any unnecessary hand-holding, we were fully bought in.” Below the quote, the text identifies the speaker as Sam Wickham, Lead Software Engineer. The Linktree logo is placed at the bottom of the central box, and the Descope logo is in the bottom right corner of the entire image.
A photograph of two men standing behind a Descope trade show booth in a conference hall. Both men wear Lanyards; the man on the left gives a thumbs-up and wears a black plaid shirt, while the man on the right wears a grey blazer over a dark shirt. The booth features a table with a black tablecloth covered in merchandise, including blue "My LLM ate my homework" and "MCP" t-shirts, grey tote bags, stickers, and brochures. A computer monitor on the table displays text about "Auth and Access Control for your AI Agents and MCP Servers" and lists customer logos like GoFundMe, 6sense, and Yardstick. Behind them is a black curtain backdrop. A large pull-up banner on the right of the booth says "descope Identity provider for your AI agents" with a list of features: "Authentic Identity Management", "Agent Credential Management", "MCP auth and access control", "User auth and consent", and "AI agent Auditability". Part of another purple banner with the word "platform" is visible on the far left. The background is a carpeted conference area with scattered round tables and a few blurry attendees in the distance. The ceiling has distinctive round, glowing light fixtures.