Descope is a Customer Identity and Access Management (CIAM) platform designed for both B2B and B2C applications. It provides authentication, authorization, and user management capabilities through a combination of no-code/low-code workflow tools and developer SDKs. Core capabilities: - Authentication: Supports multiple authentication methods and MFA, with support for SAML and OIDC-based SSO. SSO self-service provisioning allows end users to configure their own identity providers. - User Journeys (Flows): A no-code workflow builder for creating and customizing user journeys such as user invites, step-up authentication, user merging, and identity orchestration — without modifying application code. - Multi-tenancy: Built-in multi-tenant architecture supporting B2B enterprise requirements. Session management, password settings, and permission controls can be configured at the tenant level via the console or Management SDK. - Authorization: Supports fine-grained authorization models including RBAC (Role-Based Access Control), ReBAC (Relationship-Based Access Control), and ABAC (Attribute-Based Access Control). Custom JWT claims can be used to define access controls. - Delegated Administration: Embeddable widgets for end-user self-service, including user/role management, access key management, audit logs, and user profiles. - Risk-based MFA: Branching user paths based on risk scores ingested from third-party fraud and bot detection services (e.g., reCAPTCHA). - SDKs: Client, backend, and mobile SDKs are available for integration into web and mobile applications. - Identity Federation: Unifies customer identities across multiple business-facing applications.