SAML / OIDC SSO

Drag & drop SSO provider for your app

Create and modify SSO journeys with visual workflows.
Enable self-service SSO and SCIM setup for B2B customers.
Enforce SSO for enabled domains and support multi-SSO configs per tenant.
Seamlessly migrate existing SSO connections.

From scratch to SSO in 10 minutes

SSO, self-service setup, testing, attribute and group mapping, multiple IdPs per tenant...there's no SSO box we don't check.

B2B sample app

SSO sans struggle with Descope

B2B auth and access control

Add every flavor of external SSO

Easily support SAML and OIDC single sign-on for your app.
Add SSO for third-party and hosted apps by using Descope as an OIDC Provider.
Support customer orgs. that need multiple IdPs per tenant.
Use Descope as both IdP and SP, sometimes in the same flow.
Provide granular tenant-level access with RBAC and FGA.

SSO Setup Suite

Turn B2B admins into SSO superheroes

Generate self-service SSO and SCIM setup portals for each tenant.
Use prebuilt guides for 15+ IdPs with attribute and group mapping.
Let customer admins set up, manage, and test SSO connections entirely on their own.
Seamlessly migrate existing SSO connections with zero downtime.

Identity Federation

Achieve a 360 customer view across all your apps

Unify login experiences across disparate external-facing apps and IdPs.
Dynamically handle many-to-many identity relationships in workflows.
Personalize login experiences across hosted apps like Zendesk, Salesforce, Retool, Supabase, Shiny, Panel, and more.

SCIM Provisioning

Turn SCIM setup into a skim

Share self-service SCIM portals with guided or generic setup.
Provide multiple IdP configurations per tenant.
Map users, groups, and roles across IdPs and apps, including custom attributes.

"We love Descope SSO flows from a CX standpoint. A customer we onboarded just told us it was the fastest implementation ever. It usually takes weeks but we were done in 15 minutes - small talk included!"

David Li, Senior Software Engineer

Implement SSO your way

Flows

Use our no-code editor to create user-facing screens and SSO authentication flows for your app. Easily modify and update your flows from the Descope console as your user journey evolves.

SDKs

Use our SDKs to easily integrate SAML or OIDC SSO authentication into your app. Let us handle session management with Client SDKs or connect your app server to our service directly with Backend SDKs.

API

Use our REST APIs to implement SSO authentication for your app. Our clear documentation makes navigating and actioning the API a breeze.

What our customers say

David Li, Senior Software Engineer

“Visualizing the user journey as a workflow enables us to audit and modify the registration and authentication journey without making significant code changes.”

Arkadiy Goykhberg, CISO

“Our team really appreciates the empathetic and ever-present support. Whether it’s regular check-ins, guidance for unique use cases, or fast response and deployment for feature requests, we can see that Descope has our back.”

Marut Singh, CTO

“Descope met our needs and use case perfectly. The product is easy to deploy, we appreciate the SDK-level customization, and their team is super responsive to any enhancement suggestions.”

VP of Engineering, Media & Entertainment

“Descope has truly been ‘set it and forget it’ for authentication by making user journeys seamless and secure for all users that interact with our service.”

Sasidhar Sista, Co-Founder