Drag & drop MFA provider

Yes! Descope helps customers add MFA to their apps using a visual drag-and-drop workflow editor. Customers can choose from any auth method for their MFA flow (including strong factors like passkeys) and can implement risk-based MFA based on device fingerprinting, IP and geolocation, third-party risk connectors, and several other factors.

You can sign up for a Free Forever account or request a demo to learn more.

Descope supports a wide variety of MFA factors like:

• One-time passcodes (over SMS, email, and messaging services)

• Magic links (over SMS, email, and messaging services)

• Passkeys / biometrics

• Security questions

• Recovery codes

• TOTP authenticator apps

No. In addition to supporting MFA as your primary CIAM solution, Descope can also add risk-based, phishing-resistant MFA as an augmentation to existing authentication stacks and user stores. For example, Navan added magic link based MFA with Descope without changing their primary authentication provider.

Yes. By creating conditional steps in Descope Flows, organizations can design an MFA process that only triggers if their chosen risk criteria are met. The risk criteria are completely customizable, for example:

• Untrusted devices

• IP reputation

• Geolocation

• Bot scores

• Impossible traveler scenarios

• External risk scores from connectors such as reCAPTCHA, Forter, Fingerprint, and Bitsight