53:I[641815,["/_next/static/immutable/chunks/0d0inunyp-zwq.js","/_next/static/immutable/chunks/16vw-h-i4usng.js","/_next/static/immutable/chunks/3dc8anz5--q1w.js","/_next/static/immutable/chunks/3czibijl5lj74.js","/_next/static/immutable/chunks/43xmj4ii3f9ne.js","/_next/static/immutable/chunks/14uk5wz9a2pxr.js","/_next/static/immutable/chunks/191kn3mqh_30e.js","/_next/static/immutable/chunks/2j3dw4s7z5wob.js","/_next/static/immutable/chunks/3txe0joif93zp.js","/_next/static/immutable/chunks/0tl29vg7ktqu8.js","/_next/static/immutable/chunks/1tv8if6b_vyoa.js","/_next/static/immutable/chunks/0g73nyptz7r-z.js","/_next/static/immutable/chunks/12ho6o211wtc3.js","/_next/static/immutable/chunks/0ood5ko3ez57v.js","/_next/static/immutable/chunks/1seu7rekbu_a9.js","/_next/static/immutable/chunks/2dny6htvs67m_.js","/_next/static/immutable/chunks/2p_phd0ha026t.js","/_next/static/immutable/chunks/1esrje34lwjxh.js","/_next/static/immutable/chunks/3gsmcj9uqqm8_.js","/_next/static/immutable/chunks/3yl3ljyzgye6h.js","/_next/static/immutable/chunks/0i_tam0d0e_lu.js","/_next/static/immutable/chunks/1ov-hirp-ibwv.js","/_next/static/immutable/chunks/43nsotkrbwkgc.js","/_next/static/immutable/chunks/11fwha0ikyv-6.js","/_next/static/immutable/chunks/3sr8of28bmf6k.js","/_next/static/immutable/chunks/1hd7qc82j2hgu.js","/_next/static/immutable/chunks/1tmwsmnqhoh_4.js","/_next/static/immutable/chunks/2fzvz9cmuhbjo.js","/_next/static/immutable/chunks/0t3q2l527cq1e.js","/_next/static/immutable/chunks/0ydq7gxsp_yg6.js","/_next/static/immutable/chunks/4377kvat7ayqf.js","/_next/static/immutable/chunks/05tnn4vqz7vom.js","/_next/static/immutable/chunks/18mkaf75b33z_.js","/_next/static/immutable/chunks/0ju8equvfxcxt.js"],"FlowEmailStage"] 54:T9f44,{"\n "}{"Gartner® Report: IAM Adapts to Secure and Enable AI Agents"}{"\n "}{"\n "}{"\n \n \n \n"}{"\n"}{"\n"}{"\n"}{"\n"}{"\n"}

{"\n "}

{"\n"}

{"\n \n \n \n \n \n "}

{"\n "}{"\n "}

{"\n "}

{"\n Access your complimentary copy of the 2026 Gartner report on agentic identity use cases and guidance.\n ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ \n"}

{"\n "}

{"\n \n"}

{"\n "}

{" "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "}{"\n "} Gartner CIAM Buyers Guide thumbnail 1-3

{"\n "}{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"AI agents are a fundamentally new actor within enterprise systems."}

{"\n"}

{" "}

{"\n"}

{"Identity leaders must assess their current processes and technology stack to fill any gaps in identity registration, credential management, and authorization tailored to AI agents."}

{"\n"}

{" "}

{"\n"}

{"Get your complimentary copy of the 2025 Gartner® Report: IAM Adapts to Secure and Enable AI Agents to learn:"}

{"\n"}

{"✱"}{" "}{"How AI agents break traditional identity models"}
{"✱"}{" "}{"Common agentic identity use cases and implementation patterns"}
{"✱"}{" "}{"Implementation-oriented guidance for agentic identity"}

{"\n"}

{"Get your copy of the report below 👇"}

{"\n "}

{"\n "}{"\n "}{"Get Report →"}{"\n "}{"\n "}

{"\n "}

{"Cheers,"}

{"\n"}

{"Your friendly neighborhood Descopers"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Descope_RGB logo-ForLightBackground_300ppi

{"\n "}

{"\n"}

{"\n "}

{"\n "} github-logo-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} linkedin-icon-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} x-grey-icon

{"\n "}{"\n "}

{"\n "}

{"\n "} instagram-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} slack-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} youtube-logo

{"\n "}{"\n "}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope"}{", 20660 Stevens Creek Blvd. #245, Cupertino, CA, 95014"}

{"\n"}

{"Manage Preferences"}{" "}{"Site"}{" "}{"Privacy"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n"}55:T8861, Gartner® Report: IAM Adapts to Secure and Enable AI Agents

AI agents are a fundamentally new actor within enterprise systems.

Identity leaders must assess their current processes and technology stack to fill any gaps in identity registration, credential management, and authorization tailored to AI agents.

Get your complimentary copy of the 2025 Gartner® Report: IAM Adapts to Secure and Enable AI Agents to learn:

✱ How AI agents break traditional identity models
✱ Common agentic identity use cases and implementation patterns
✱ Implementation-oriented guidance for agentic identity

Get your copy of the report below 👇

Get Report →

Cheers,

Your friendly neighborhood Descopers

56:T17fa7,{"\n "}{"Descope April Product Updates"}{"\n "}{"\n "}{"\n \n \n \n"}{"\n"}{"\n"}{"\n"}{"\n"}{"\n"}

{"\n "}

{"\n"}

{"\n \n \n \n \n \n "}

{"\n "}{"\n "}

{"Welcome to Auth Thoughts! Read on for Descope product updates and the latest from the world of identity and authentication. ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ \n"}

{"\n \n"}

{"\n "}

{" "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Auth Thoughts April 2026

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"CIBA support, Flow observability & other Descope product updates"}

{"\n"}

{"Auth Thoughts is a monthly newsletter produced by Team Descope, the collective consciousness of everyone at "}{"Descope"}{". Read on for product updates, tutorials, and a monthly roundup from the world of identity and authentication."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope changelog"}

{"\n "}

{"To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:"}

{"\n "}

{"🔒 CIBA support"}

{"\n"}

{"\n "} ciba-configuration

{"\n "}

{"Descope now supports Client-Initiated Backchannel Authentication (CIBA), an OAuth extension designed for decoupled or headless experiences where the device initiating the request cannot easily present a browser-based login or consent screen. This is a recommended approach for “human-in-the-loop” scenarios within AI agent and MCP server flows."}

{"\n"}

{" "}

{"\n"}

{"Learn more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"👁️‍🗨️ Flow observability"}

{"\n "}

{"Flow observability has been enhanced with new troubleshooting capabilities that allow Descopers to monitor all flow executions, including successful runs. We’re also piloting AI analytics to assist in interpreting flow events and understanding specific execution paths. Please reach out to us if you’d like access to this capability!"}

{"\n "}

{"🤖 Render MCP template"}

{"\n"}

{"\n "}{"\n "} Descope Render MCP Thumbnail (1)

{"\n "}{"\n "}

{"\n "}

{"Organizations experimenting with MCP run into two main challenges: deploying remote servers and complying with the auth spec. Descope’s MCP template with Render solves both: this sample FastMCP server uses Render Blueprints for simple deployment with spec-compliant auth, client registration, and access control from Descope."}

{"\n"}

{" "}

{"\n"}

{"Learn more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Catch up on other product updates in our "}{"changelog"}{". Have questions? Join our "}{"community"}{" and visit the #ask-a-descoper channel."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{" "}

{"\n "}

{"\n \n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Developer central"}

{"\n "}

{"Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Add ReBAC to RAG"}

{"\n"}

{"This tutorial covers how to add relationship-based access control to a RAG pipeline using Descope."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Add auth to Shopify"}

{"\n"}

{"This guide shares the ramifications of Shopify deprecating multipass and how you can easily add omnichannel auth to your Shopify storefront with Descope."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Bring Your Own Screen"}

{"\n"}

{"This video showcases Descope’s Bring Your Own Screen (BYOS) capability and how you can use it to leverage the flexibility of flows while retaining full UI control."}

{"\n"}

{"Watch →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Customer spotlight: Linktree"}

{"\n"}

{"\n "}{"\n "} Linktree Customer Story Thumbnail

{"\n "}{"\n "}

{"\n "}

{"Linktree–the category leading link-in-bio platform serving over 70 million users– needed an identity solution that better aligned with their scaling needs without having their engineers maintain custom auth logic. Descope helped them:"}

{"\n"}

{" "}

{"\n"}

{"✅ Deploy flexible user journeys while retaining full UI control"}
{"✅ Manage token lifecycles for user connections to third-party platforms"}
{"✅ Migrate tens of millions of users with zero downtime"}

{"\n"}

{" "}

{"\n"}

{"Read their story →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Helpful resources"}

{"\n "}

{"Thanks for reading "}{"Auth Thoughts! "}{"If you’d like any other updates from the world of identity and authentication included in this newsletter, please let us know by replying to this email."}

{"\n"}

{" "}

{"\n"}

{"Here are some other links to have handy:"}

{"\n"}

{" "}

{"\n"}

{"🖥️ "}{"Sign up"}{" for a Descope Free Forever account"}

{"\n"}

{"✍️ "}{"Developer blogs"}{", if you’re looking for tutorials with specific frameworks"}

{"\n"}

{"📚 "}{"Documentation"}{", for Descope setup instructions, SDK code snippets, and more"}

{"\n"}

{" "}

{"\n"}

{"See you next month!"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Descope_RGB logo-ForLightBackground_300ppi

{"\n "}

{"\n"}

{"\n "}

{"\n "} github-logo-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} linkedin-icon-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} x-grey-icon

{"\n "}{"\n "}

{"\n "}

{"\n "} instagram-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} slack-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} youtube-logo

{"\n "}{"\n "}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope"}{", 20660 Stevens Creek Blvd. #245, Cupertino, CA, 95014"}

{"\n"}

{"Manage Preferences"}{" "}{"Site"}{" "}{"Privacy"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n"}57:T13c38, Descope April Product Updates

CIBA support, Flow observability & other Descope product updates

Auth Thoughts is a monthly newsletter produced by Team Descope, the collective consciousness of everyone at Descope. Read on for product updates, tutorials, and a monthly roundup from the world of identity and authentication.

Descope changelog

To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:

🔒 CIBA support

Descope now supports Client-Initiated Backchannel Authentication (CIBA), an OAuth extension designed for decoupled or headless experiences where the device initiating the request cannot easily present a browser-based login or consent screen. This is a recommended approach for “human-in-the-loop” scenarios within AI agent and MCP server flows.

Learn more →

👁️‍🗨️ Flow observability

Flow observability has been enhanced with new troubleshooting capabilities that allow Descopers to monitor all flow executions, including successful runs. We’re also piloting AI analytics to assist in interpreting flow events and understanding specific execution paths. Please reach out to us if you’d like access to this capability!

🤖 Render MCP template

Organizations experimenting with MCP run into two main challenges: deploying remote servers and complying with the auth spec. Descope’s MCP template with Render solves both: this sample FastMCP server uses Render Blueprints for simple deployment with spec-compliant auth, client registration, and access control from Descope.

Learn more →

Catch up on other product updates in our changelog. Have questions? Join our community and visit the #ask-a-descoper channel.

Developer central

Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered.

Add ReBAC to RAG

This tutorial covers how to add relationship-based access control to a RAG pipeline using Descope.

This guide shares the ramifications of Shopify deprecating multipass and how you can easily add omnichannel auth to your Shopify storefront with Descope.

Bring Your Own Screen

This video showcases Descope’s Bring Your Own Screen (BYOS) capability and how you can use it to leverage the flexibility of flows while retaining full UI control.

Watch →

Customer spotlight: Linktree

Linktree–the category leading link-in-bio platform serving over 70 million users– needed an identity solution that better aligned with their scaling needs without having their engineers maintain custom auth logic. Descope helped them:

✅ Deploy flexible user journeys while retaining full UI control
✅ Manage token lifecycles for user connections to third-party platforms
✅ Migrate tens of millions of users with zero downtime

Read their story →

Helpful resources

Thanks for reading Auth Thoughts! If you’d like any other updates from the world of identity and authentication included in this newsletter, please let us know by replying to this email.

Here are some other links to have handy:

🖥️ Sign up for a Descope Free Forever account

✍️ Developer blogs, if you’re looking for tutorials with specific frameworks

📚 Documentation, for Descope setup instructions, SDK code snippets, and more

See you next month!

58:Ta218,{"\n "}{"Webinar: Tips to Navigate B2B2X Identity Complexity"}{"\n "}{"\n "}{"\n \n \n \n"}{"\n"}{"\n"}{"\n"}{"\n"}{"\n"}

{"\n "}

{"\n"}

{"\n \n \n \n \n \n "}

{"\n "}{"\n "}

{"\n "}

{"\n On-demand webinar with KuppingerCole on providing frictionless, secure identity journeys for business customers and partners.\n ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ \n"}

{"\n "}

{"\n \n"}

{"\n "}

{" "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "}{"\n "} B2B2X-Webinar-650x350

{"\n "}{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"If your company serves businesses, partners, and contractors, identity can become a complex web."}

{"\n"}

{" "}

{"\n"}

{"How do you handle the unique security and UX requirements of every stakeholder? How do you avoid your IT team fielding endless support tickets for password resets? And if you’re building AI agents or MCP servers, how do they translate to your B2B2X environment? "}

{"\n"}

{" "}

{"\n"}

{" "}

{"\n"}

{"Watch this on-demand webinar with Descope and KuppingerCole to learn:"}

{"\n"}

{"✱"}{" Identity challenges unique to B2B2X environments"}
{"✱"}{" "}{"Real-world deployment stories and architectural decisions"}
{"✱"}{" "}{"How to build MCP servers and AI agents with multiple control layers"}

{"\n"}

{" "}

{"\n"}

{"Watch the webinar below 👇"}

{"\n "}

{"\n "}{"\n "}{"Watch →"}{"\n "}{"\n "}

{"\n "}

{"Cheers,"}

{"\n"}

{"Your friendly neighborhood Descopers"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Descope_RGB logo-ForLightBackground_300ppi

{"\n "}

{"\n"}

{"\n "}

{"\n "} github-logo-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} linkedin-icon-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} x-grey-icon

{"\n "}{"\n "}

{"\n "}

{"\n "} instagram-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} slack-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} youtube-logo

{"\n "}{"\n "}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope"}{", 20660 Stevens Creek Blvd. #245, Cupertino, CA, 95014"}

{"\n"}

{"Manage Preferences"}{" "}{"Site"}{" "}{"Privacy"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n"}59:T8b18, Webinar: Tips to Navigate B2B2X Identity Complexity

If your company serves businesses, partners, and contractors, identity can become a complex web.

How do you handle the unique security and UX requirements of every stakeholder? How do you avoid your IT team fielding endless support tickets for password resets? And if you’re building AI agents or MCP servers, how do they translate to your B2B2X environment?

Watch this on-demand webinar with Descope and KuppingerCole to learn:

✱ Identity challenges unique to B2B2X environments
✱ Real-world deployment stories and architectural decisions
✱ How to build MCP servers and AI agents with multiple control layers

Watch the webinar below 👇

Watch →

Cheers,

Your friendly neighborhood Descopers

5a:T175e6,{"\n "}{"Descope May Product Updates"}{"\n "}{"\n "}{"\n \n \n \n"}{"\n"}{"\n"}{"\n"}{"\n"}{"\n"}

{"\n "}

{"\n"}

{"\n \n \n \n \n \n "}

{"\n "}{"\n "}

{"\n \n"}

{"\n "}

{" "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Auth Thoughts May 2026

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Admin Portal, tenant user isolation, and other Descope product updates"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope changelog"}

{"\n "}

{"To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:"}

{"\n "}

{"💼 Admin Portal"}

{"\n"}

{"\n "}{"\n "} Admin Portal Dark Mode

{"\n "}{"\n "}

{"\n "}

{"The Descope Admin Portal gives organizations a flexible, hosted way to manage identities, all set up from the Descope Console. This hosted, tenant-aware solution uses Descope Widgets to give organizations a central, branded self-service portal. Users and tenant admins can securely manage identity, access, apps, and admin tasks without your engineering team having to build custom tools from the ground up."}

{"\n"}

{" "}

{"\n"}

{"Learn more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"🔒 Tenant-level users"}

{"\n"}

{"\n "}{"\n "} Isolate users per tenant

{"\n "}{"\n "}

{"\n "}

{"Tenant-level users is a new project-level toggle that flips Descope's identity model from users being shared across tenants to being fully isolated per tenant. With the setting enabled, the same login ID (alice@example.com) becomes a separate user in each tenant, with independent credentials, MFA state, profile, and history. This is useful for white-label resellers, franchise / multi-brand SaaS platforms, and post M&A identity consolidation."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Catch up on other product updates in our "}{"changelog"}{". Have questions? Join our "}{"community"}{" and visit the #ask-a-descoper channel."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{" "}

{"\n "}

{"\n \n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Developer central"}

{"\n "}

{"Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Build a Claude Gmail agent"}

{"\n"}

{"This tutorial builds a Claude Gmail agent with auth, scope-based access, and human-in-the-loop powered by Descope."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"How we built an identity-aware AI coding agent"}

{"\n"}

{"This blog provides an overview of Shuni, the internal AI coding agent we use at Descope, and how Descope provides the necessary identity controls."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"MCP auth 101 for developers"}

{"\n"}

{"This video provides an overview of MCP, covers how the MCP auth handshake works, and highlights the pros and cons of the different client registration methods."}

{"\n"}

{"Watch →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Customer spotlight: Collabrios Health"}

{"\n"}

{"\n "}{"\n "} Collabrios Health Customer Story Thumbnail

{"\n "}{"\n "}

{"\n "}

{"Collabrios Health, a purpose-built software solution that unifies the care delivery journey and trusted by PACE, aging services, and community-based organizations, was facing delayed customer onboarding and increased engineering overhead due to a patchwork of legacy identity systems."}

{"\n"}

{" "}

{"\n"}

{"Descope helped them:"}

{"\n"}

{" "}

{"\n"}

{"✅ Provide a “single front door” auth experience across all their portals"}
{"✅ Cater to tenant-specific security and UX requirements "}
{"✅ Simplify customer onboarding with self-service SSO and SCIM"}

{"\n"}

{" "}

{"\n"}

{" "}

{"\n"}

{"Read their story →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Helpful resources"}

{"\n "}

{"\n"}

{" "}

{"\n"}

{"Here are some other links to have handy:"}

{"\n"}

{" "}

{"\n"}

{"🖥️ "}{"Sign up"}{" for a Descope Free Forever account"}

{"\n"}

{"✍️ "}{"Developer blogs"}{", if you’re looking for tutorials with specific frameworks"}

{"\n"}

{"📚 "}{"Documentation"}{", for Descope setup instructions, SDK code snippets, and more"}

{"\n"}

{" "}

{"\n"}

{"See you next month!"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Descope_RGB logo-ForLightBackground_300ppi

{"\n "}

{"\n"}

{"\n "}

{"\n "} github-logo-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} linkedin-icon-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} x-grey-icon

{"\n "}{"\n "}

{"\n "}

{"\n "} instagram-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} slack-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} youtube-logo

{"\n "}{"\n "}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope"}{", 20660 Stevens Creek Blvd. #245, Cupertino, CA, 95014"}

{"\n"}

{"Manage Preferences"}{" "}{"Site"}{" "}{"Privacy"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n"}5b:T13343, Descope May Product Updates

Admin Portal, tenant user isolation, and other Descope product updates

Descope changelog

To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:

💼 Admin Portal

The Descope Admin Portal gives organizations a flexible, hosted way to manage identities, all set up from the Descope Console. This hosted, tenant-aware solution uses Descope Widgets to give organizations a central, branded self-service portal. Users and tenant admins can securely manage identity, access, apps, and admin tasks without your engineering team having to build custom tools from the ground up.

Learn more →

🔒 Tenant-level users

Tenant-level users is a new project-level toggle that flips Descope's identity model from users being shared across tenants to being fully isolated per tenant. With the setting enabled, the same login ID (alice@example.com) becomes a separate user in each tenant, with independent credentials, MFA state, profile, and history. This is useful for white-label resellers, franchise / multi-brand SaaS platforms, and post M&A identity consolidation.

Catch up on other product updates in our changelog. Have questions? Join our community and visit the #ask-a-descoper channel.

Developer central

Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered.

Build a Claude Gmail agent

This tutorial builds a Claude Gmail agent with auth, scope-based access, and human-in-the-loop powered by Descope.

This blog provides an overview of Shuni, the internal AI coding agent we use at Descope, and how Descope provides the necessary identity controls.

MCP auth 101 for developers

This video provides an overview of MCP, covers how the MCP auth handshake works, and highlights the pros and cons of the different client registration methods.

Watch →

Customer spotlight: Collabrios Health

Collabrios Health, a purpose-built software solution that unifies the care delivery journey and trusted by PACE, aging services, and community-based organizations, was facing delayed customer onboarding and increased engineering overhead due to a patchwork of legacy identity systems.

Descope helped them:

✅ Provide a “single front door” auth experience across all their portals
✅ Cater to tenant-specific security and UX requirements
✅ Simplify customer onboarding with self-service SSO and SCIM

Read their story →

Helpful resources

Thanks for reading Auth Thoughts! If you’d like any other updates from the world of identity and authentication included in this newsletter, please let us know by replying to this email.

Here are some other links to have handy:

🖥️ Sign up for a Descope Free Forever account

✍️ Developer blogs, if you’re looking for tutorials with specific frameworks

📚 Documentation, for Descope setup instructions, SDK code snippets, and more

See you next month!

5c:T18d68,{"\n "}{"Descope June Product Updates"}{"\n "}{"\n "}{"\n \n \n \n"}{"\n"}{"\n"}{"\n"}{"\n"}{"\n"}

{"\n "}

{"\n"}

{"\n \n \n \n \n \n "}

{"\n "}{"\n "}

{"\n \n"}

{"\n "}

{" "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Auth Thoughts June 2026

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope MCP server, AI agent skills, and other product updates"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope changelog"}

{"\n "}

{"To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:"}

{"\n "}

{"🏆 Descope MCP server"}

{"\n"}

{"\n "}{"\n "} List_every_flow_in_this_project

{"\n "}{"\n "}

{"\n "}

{"The Descope MCP server connects your AI assistant to the Descope identity platform. It gives agents the ability to read documentation, inspect your project configuration, manage users and tenants, configure authentication flows, review audit logs, and make changes to your identity infrastructure, all through natural language and from a single session."}

{"\n"}

{" "}

{"\n"}

{"Learn more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"🤖 AI agent skills"}

{"\n"}

{"\n "}{"\n "} Descope Skills Thumbnail

{"\n "}{"\n "}

{"\n "}

{"Descope Skills give agents the specialized knowledge to build identity systems like an expert instead of relying on generalist training data. With Descope Skills, AI agents can handle authentication, authorization, migrations, auditing, and identity workflows accurately, without needing to be reminded of auth best practices again and again."}

{"\n"}

{" "}

{"\n"}

{"Learn more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"🏦 B2B CIAM enhancements"}

{"\n "}

{"\n"}
{"Proactive SSO Expiry Alerts:"}{" Descopers can now configure proactive notifications to alert when an SSO certificate is nearing its expiration date. "}
{"\n"}
{" "}
{"\n"}
{"\n"}
{"SCIM Seamless Migration:"}{" A migration framework has been introduced for SCIM provisioning, allowing enterprise customers to cut over identity management setups without user friction or downtime."}
{"\n"}
{" "}
{"\n"}
{"\n"}
{"Tenant-Level UI Customization: "}{"Descopers can now configure and apply tenant-specific UI styles, enabling distinct white-label branding across multi-tenant applications."}
{"\n"}
{" "}
{"\n"}
{"\n"}
{"Tenant Sub-Hierarchies:"}{" Descopers can now build and manage nested parent-child sub-hierarchies under a single tenant, enabling cleaner enterprise organizational mapping and cascading permission structures."}
{"\n"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Catch up on other product updates in our "}{"changelog"}{". Have questions? Join our "}{"community"}{" and visit the #ask-a-descoper channel."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{" "}

{"\n "}

{"\n \n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Developer central"}

{"\n "}

{"Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Implement ReBAC without rebuilding AuthZ"}

{"\n"}

{"This blog covers when RBAC falls short, real-world ReBAC use cases, and guidance on how to gradually transition your app over from RBAC to FGA."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"How Descope works with Amazon AgentCore"}

{"\n"}

{"This blog provides a working example of how to build identity-aware agents with Amazon Bedrock AgentCore and Descope Agentic Identity Hub."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Identity for autonomous agents"}

{"\n"}

{"This blog covers how Descope supports the full identity lifecycle for autonomous agents. It goes through a working example of an n8n workflow that calls BigQuery with scoped, delegated access using Descope."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Customer spotlight: Token Security"}

{"\n"}

{"\n "}{"\n "} Descope Token Customer Story Thumbnail

{"\n "}{"\n "}

{"\n "}

{"Token Security is a pioneering cybersecurity company focused on securing agentic AI and non-human identities, was seeking an identity provider that could handle both tenant-aware, self service identity for its B2B customers as well as scoped, protocol-compliant auth for its MCP server."}

{"\n"}

{" "}

{"\n"}

{"Descope helped them:"}

{"\n"}

{" "}

{"\n"}

{"✅ Enable SSO with self-service setup for B2B customer admins"}
{"✅ Provide user auth, consent, and scope-based access for their MCP server "}
{"✅ Seamlessly migrate existing SSO and tenant configurations"}

{"\n"}

{" "}

{"\n"}

{"Read their story →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Helpful resources"}

{"\n "}

{"\n"}

{" "}

{"\n"}

{"Here are some other links to have handy:"}

{"\n"}

{" "}

{"\n"}

{"🖥️ "}{"Sign up"}{" for a Descope Free Forever account"}

{"\n"}

{"✍️ "}{"Developer blogs"}{", if you’re looking for tutorials with specific frameworks"}

{"\n"}

{"📚 "}{"Documentation"}{", for Descope setup instructions, SDK code snippets, and more"}

{"\n"}

{" "}

{"\n"}

{"See you next month!"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Descope_RGB logo-ForLightBackground_300ppi

{"\n "}

{"\n"}

{"\n "}

{"\n "} github-logo-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} linkedin-icon-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} x-grey-icon

{"\n "}{"\n "}

{"\n "}

{"\n "} instagram-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} slack-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} youtube-logo

{"\n "}{"\n "}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope"}{", 20660 Stevens Creek Blvd. #245, Cupertino, CA, 95014"}

{"\n"}

{"Manage Preferences"}{" "}{"Site"}{" "}{"Privacy"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n"}5d:T1468f, Descope June Product Updates

Descope MCP server, AI agent skills, and other product updates

Descope changelog

To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:

🏆 Descope MCP server

The Descope MCP server connects your AI assistant to the Descope identity platform. It gives agents the ability to read documentation, inspect your project configuration, manage users and tenants, configure authentication flows, review audit logs, and make changes to your identity infrastructure, all through natural language and from a single session.

Learn more →

🤖 AI agent skills

Descope Skills give agents the specialized knowledge to build identity systems like an expert instead of relying on generalist training data. With Descope Skills, AI agents can handle authentication, authorization, migrations, auditing, and identity workflows accurately, without needing to be reminded of auth best practices again and again.

Learn more →

🏦 B2B CIAM enhancements

Proactive SSO Expiry Alerts: Descopers can now configure proactive notifications to alert when an SSO certificate is nearing its expiration date.
SCIM Seamless Migration: A migration framework has been introduced for SCIM provisioning, allowing enterprise customers to cut over identity management setups without user friction or downtime.
Tenant-Level UI Customization: Descopers can now configure and apply tenant-specific UI styles, enabling distinct white-label branding across multi-tenant applications.
Tenant Sub-Hierarchies: Descopers can now build and manage nested parent-child sub-hierarchies under a single tenant, enabling cleaner enterprise organizational mapping and cascading permission structures.

Catch up on other product updates in our changelog. Have questions? Join our community and visit the #ask-a-descoper channel.

Developer central

Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered.

Implement ReBAC without rebuilding AuthZ

This blog covers when RBAC falls short, real-world ReBAC use cases, and guidance on how to gradually transition your app over from RBAC to FGA.

This blog provides a working example of how to build identity-aware agents with Amazon Bedrock AgentCore and Descope Agentic Identity Hub.

Identity for autonomous agents

This blog covers how Descope supports the full identity lifecycle for autonomous agents. It goes through a working example of an n8n workflow that calls BigQuery with scoped, delegated access using Descope.

Token Security is a pioneering cybersecurity company focused on securing agentic AI and non-human identities, was seeking an identity provider that could handle both tenant-aware, self service identity for its B2B customers as well as scoped, protocol-compliant auth for its MCP server.

Descope helped them:

✅ Enable SSO with self-service setup for B2B customer admins
✅ Provide user auth, consent, and scope-based access for their MCP server
✅ Seamlessly migrate existing SSO and tenant configurations

Read their story →

Helpful resources

Thanks for reading Auth Thoughts! If you’d like any other updates from the world of identity and authentication included in this newsletter, please let us know by replying to this email.

Here are some other links to have handy:

🖥️ Sign up for a Descope Free Forever account

✍️ Developer blogs, if you’re looking for tutorials with specific frameworks

📚 Documentation, for Descope setup instructions, SDK code snippets, and more

See you next month!

5e:T18bf0,{"\n "}{"Descope July Product Updates"}{"\n "}{"\n "}{"\n \n \n \n"}{"\n"}{"\n"}{"\n"}{"\n"}{"\n"}

{"\n "}

{"\n"}

{"\n \n \n \n \n \n "}

{"\n "}{"\n "}

{"\n \n"}

{"\n "}

{" "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Auth Thoughts July 2026

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Cross-App Access support, token enhancements, and other product updates"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope changelog"}

{"\n "}

{"To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:"}

{"\n "}

{"🏆 ID-JAG / Cross-App Access support"}

{"\n "}

{"Descopers can now accept and validate workforce-IdP-issued ID-JAGs and issue Descope access tokens for Descope-protected resources."}

{"\n"}

{" "}

{"\n"}

{"\n"}
{"For issuing ID-JAGs"}{", Descope becomes the IdP for your agents and mints ID-JAGs so they can reach third-party MCP servers and APIs. "}
{"\n"}
{" "}
{"\n"}
{"\n"}
{"For validating ID-JAGs"}{", your customers can connect their workforce IdPs to your MCP server and Descope provides an access token."}
{"\n"}

{"\n"}

{" "}

{"\n"}

{"Learn more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"⚙️ Token enhancements"}

{"\n "}

{"\n"}
{"Token Introspection Endpoint:"}{" Descopers can now use a standard OAuth token introspection endpoint to validate a token and its claims in real time."}
{"\n"}
{" "}
{"\n"}
{"\n"}
{"Downscoped Tokens:"}{" Descopers can now optionally return tokens with different (downscoped) scopes than the client requested, which is useful for MCP clients that request all scopes."}
{"\n"}

{"\n"}

{" "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Catch up on other product updates in our "}{"changelog"}{". Have questions? Join our "}{"community"}{" and visit the #ask-a-descoper channel."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{" "}

{"\n "}

{"\n \n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Developer central"}

{"\n "}

{"Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Build an ecommerce UCP server with identity linking"}

{"\n"}

{"This tutorial builds a UCP-compliant MCP server with Descope as the identity layer."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"CIBA for AI agents with Claude "}

{"\n"}

{"This tutorial wires up a Claude Code agent with CIBA using Claude Code Hooks and the Descope Agentic Identity Hub."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Securing a BigQuery MCP server with MCP Tunnels"}

{"\n"}

{"This blog covers how we built an internal MCP server that lets our CS team get data from BigQuery. This server is protected by the Descope Agentic Identity Hub and MCP Tunnels."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Customer spotlight: Elementor"}

{"\n"}

{"\n "}{"\n "} Elementor Descope Case Study Thumbnail

{"\n "}{"\n "}

{"\n "}

{"Elementor is the world’s most popular WordPress website creation platform. Their top requirement from an external auth provider: the login experience needed to match the existing Elementor design exactly."}

{"\n"}

{" "}

{"\n"}

{"Descope helped them:"}

{"\n"}

{" "}

{"\n"}

{"✅ Design user journeys visually without engineering overhead"}
{"✅ Match existing designs using Bring Your Own Screen (BYOS)"}
{"✅ Sync internal databases using HTTP connectors"}

{"\n"}

{" "}

{"\n"}

{"Read their story →"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"(A)Identity Day"}

{"\n"}

{"\n "}{"\n "} AIdentity Day Thumbnail 16_9 Date

{"\n "}{"\n "}

{"\n "}

{"Most organisations are unprepared for the challenges that come with agents entering production: agent sprawl, identity anti-patterns, and no clear framework for deploying agents safely at scale."}

{"\n"}

{" "}

{"\n"}

{"Join IAM Experts, Descope, SAP LeanIX, and Teleport in London for a day of education, lessons from the field, and practical insights to get your organisation agent-ready."}

{"\n"}

{" "}

{"\n"}

{"RSVP →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Helpful resources"}

{"\n "}

{"\n"}

{" "}

{"\n"}

{"Here are some other links to have handy:"}

{"\n"}

{" "}

{"\n"}

{"🖥️ "}{"Sign up"}{" for a Descope Free Forever account"}

{"\n"}

{"✍️ "}{"Developer blogs"}{", if you’re looking for tutorials with specific frameworks"}

{"\n"}

{"📚 "}{"Documentation"}{", for Descope setup instructions, SDK code snippets, and more"}

{"\n"}

{" "}

{"\n"}

{"See you next month!"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Descope_RGB logo-ForLightBackground_300ppi

{"\n "}

{"\n"}

{"\n "}

{"\n "} github-logo-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} linkedin-icon-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} x-grey-icon

{"\n "}{"\n "}

{"\n "}

{"\n "} instagram-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} slack-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} youtube-logo

{"\n "}{"\n "}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope"}{", 20660 Stevens Creek Blvd. #245, Cupertino, CA, 95014"}

{"\n"}

{"Manage Preferences"}{" "}{"Site"}{" "}{"Privacy"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n"}5f:T143c8, Descope July Product Updates

Cross-App Access support, token enhancements, and other product updates

Descope changelog

To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:

🏆 ID-JAG / Cross-App Access support

Descopers can now accept and validate workforce-IdP-issued ID-JAGs and issue Descope access tokens for Descope-protected resources.

For issuing ID-JAGs, Descope becomes the IdP for your agents and mints ID-JAGs so they can reach third-party MCP servers and APIs.
For validating ID-JAGs, your customers can connect their workforce IdPs to your MCP server and Descope provides an access token.

Learn more →

⚙️ Token enhancements

Token Introspection Endpoint: Descopers can now use a standard OAuth token introspection endpoint to validate a token and its claims in real time.
Downscoped Tokens: Descopers can now optionally return tokens with different (downscoped) scopes than the client requested, which is useful for MCP clients that request all scopes.

Catch up on other product updates in our changelog. Have questions? Join our community and visit the #ask-a-descoper channel.

Developer central

Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered.

Build an ecommerce UCP server with identity linking

This tutorial builds a UCP-compliant MCP server with Descope as the identity layer.

This tutorial wires up a Claude Code agent with CIBA using Claude Code Hooks and the Descope Agentic Identity Hub.

Securing a BigQuery MCP server with MCP Tunnels

This blog covers how we built an internal MCP server that lets our CS team get data from BigQuery. This server is protected by the Descope Agentic Identity Hub and MCP Tunnels.

Elementor is the world’s most popular WordPress website creation platform. Their top requirement from an external auth provider: the login experience needed to match the existing Elementor design exactly.

Descope helped them:

✅ Design user journeys visually without engineering overhead
✅ Match existing designs using Bring Your Own Screen (BYOS)
✅ Sync internal databases using HTTP connectors

Read their story →

(A)Identity Day

Most organisations are unprepared for the challenges that come with agents entering production: agent sprawl, identity anti-patterns, and no clear framework for deploying agents safely at scale.

Join IAM Experts, Descope, SAP LeanIX, and Teleport in London for a day of education, lessons from the field, and practical insights to get your organisation agent-ready.

RSVP →

Helpful resources

Thanks for reading Auth Thoughts! If you’d like any other updates from the world of identity and authentication included in this newsletter, please let us know by replying to this email.

Here are some other links to have handy:

🖥️ Sign up for a Descope Free Forever account

✍️ Developer blogs, if you’re looking for tutorials with specific frameworks

📚 Documentation, for Descope setup instructions, SDK code snippets, and more

See you next month!

60:T177a6,{"\n "}{"Self-service agent SSO, MCP tutorials & other updates"}{"\n "}{"\n "}{"\n \n \n \n"}{"\n"}{"\n"}{"\n"}{"\n"}{"\n"}

{"\n "}

{"\n"}

{"\n \n \n \n \n \n "}

{"\n "}{"\n "}

{"\n \n"}

{"\n "}

{" "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Auth Thoughts August 2026

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Self-service agent SSO, MCP tutorials, and other Descope product updates"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope changelog"}

{"\n "}

{"To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:"}

{"\n "}

{"🏆 Self-service agent SSO"}

{"\n"}

{"\n "} XAA self service setup

{"\n "}

{"What if enterprise customers accessing your MCP server could use their existing identity provider to control exactly what their AI agent can access? "}{"Cross-App Access (XAA) support with self-service setup "}{"makes this possible."}

{"\n"}

{" "}

{"\n"}

{"Validate ID-JAG tokens from AI agents accessing your MCP server"}
{"Provide a self-service portal to configure XAA with existing identity providers"}
{"Let tenant admins choose their IdP, register agents, map attributes, set trusted issuers, and more"}

{"\n"}

{" "}

{"\n"}

{"XAA self-service is now part of our SSO Setup Suite. Reach out to us on "}{"AuthTown"}{" with any questions or feedback!"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"🤖 Descope MCP server on Claude and ChatGPT"}

{"\n"}

{"\n "}{"\n "} Descope MCP server on Claude ChatGPT thumbnail

{"\n "}{"\n "}

{"\n "}

{"The Descope MCP Server is now available as a "}{"Claude Connector"}{" and a "}{"ChatGPT Plugin"}{"!"}

{"\n"}

{" "}

{"\n"}

{"Use the MCP server to connect your AI agent to the Descope platform. Give your agents the ability to read documentation, manage users and tenants, configure authentication flows, review audit logs, and make changes to your identity infrastructure… all through natural language."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Catch up on other product updates in our "}{"changelog"}{". Have questions? Join our "}{"community"}{" and visit the #ask-a-descoper channel."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{" "}

{"\n "}

{"\n \n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Developer central"}

{"\n "}

{"Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered."}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Securing an AI Agent With LlamaIndex and Descope"}

{"\n"}

{"This tutorial build a working agent with LlamaIndex that authenticates with multiple external services using Descope-managed credentials."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Securing an AI Agent With Claude Agent SDK and Descope"}

{"\n"}

{"This tutorial build a working agent with Claude Agent SDK that authenticates with multiple external services using Descope-managed credentials."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"What the MCP Spec Revision Means for Identity"}

{"\n"}

{"This blog goes through the major revisions to the MCP specification in July 2026."}

{"\n"}

{"Read more →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"(A)Identity Day"}

{"\n"}

{"\n "}{"\n "} AIdentity Day Thumbnail 169 Date (1)

{"\n "}{"\n "}

{"\n "}

{"Most organizations are unprepared for the challenges that come with agents entering production: agent sprawl, identity anti-patterns, and no clear framework for deploying agents safely at scale."}

{"\n"}

{" "}

{"\n"}

{"Join IAM Experts, Descope, SAP LeanIX, Teleport, and Ploy in London for a day of education, lessons from the field, and practical insights to get your organization agent-ready."}

{"\n"}

{" "}

{"\n"}

{"RSVP →"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Helpful resources"}

{"\n "}

{"\n"}

{" "}

{"\n"}

{"Here are some other links to have handy:"}

{"\n"}

{" "}

{"\n"}

{"🖥️ "}{"Sign up"}{" for a Descope Free Forever account"}

{"\n"}

{"✍️ "}{"Developer blogs"}{", if you’re looking for tutorials with specific frameworks"}

{"\n"}

{"📚 "}{"Documentation"}{", for Descope setup instructions, SDK code snippets, and more"}

{"\n"}

{" "}

{"\n"}

{"See you next month!"}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"\n "} Descope_RGB logo-ForLightBackground_300ppi

{"\n "}

{"\n"}

{"\n "}

{"\n "} github-logo-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} linkedin-icon-grey

{"\n "}{"\n "}

{"\n "}

{"\n "} x-grey-icon

{"\n "}{"\n "}

{"\n "}

{"\n "} instagram-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} slack-logo

{"\n "}{"\n "}

{"\n "}

{"\n "} youtube-logo

{"\n "}{"\n "}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n \n "}

{"\n \n "}

{"\n "}

{"\n"}

{"\n "}

{"Descope"}{", 20660 Stevens Creek Blvd. #245, Cupertino, CA, 95014"}

{"\n"}

{"Manage Preferences"}{" "}{"Site"}{" "}{"Privacy"}

{"\n "}

{"\n"}

{"\n "}

{"\n \n "}

{"\n "}

{"\n \n"}61:T134ea, Self-service agent SSO, MCP tutorials & other updates

Self-service agent SSO, MCP tutorials, and other Descope product updates

Descope changelog

To paraphrase a quote from Dory the forgetful fish: “Just keep shipping”. Here are some of the latest product updates from Descope:

🏆 Self-service agent SSO

What if enterprise customers accessing your MCP server could use their existing identity provider to control exactly what their AI agent can access? Cross-App Access (XAA) support with self-service setup makes this possible.

Validate ID-JAG tokens from AI agents accessing your MCP server
Provide a self-service portal to configure XAA with existing identity providers
Let tenant admins choose their IdP, register agents, map attributes, set trusted issuers, and more

XAA self-service is now part of our SSO Setup Suite. Reach out to us on AuthTown with any questions or feedback!

🤖 Descope MCP server on Claude and ChatGPT

The Descope MCP Server is now available as a Claude Connector and a ChatGPT Plugin!

Use the MCP server to connect your AI agent to the Descope platform. Give your agents the ability to read documentation, manage users and tenants, configure authentication flows, review audit logs, and make changes to your identity infrastructure… all through natural language.

Catch up on other product updates in our changelog. Have questions? Join our community and visit the #ask-a-descoper channel.

Developer central

Looking for help on how to integrate Descope for a particular framework? Our DevRel team and developer community have you covered.

Securing an AI Agent With LlamaIndex and Descope

This tutorial build a working agent with LlamaIndex that authenticates with multiple external services using Descope-managed credentials.

This tutorial build a working agent with Claude Agent SDK that authenticates with multiple external services using Descope-managed credentials.

What the MCP Spec Revision Means for Identity

This blog goes through the major revisions to the MCP specification in July 2026.

Most organizations are unprepared for the challenges that come with agents entering production: agent sprawl, identity anti-patterns, and no clear framework for deploying agents safely at scale.

Join IAM Experts, Descope, SAP LeanIX, Teleport, and Ploy in London for a day of education, lessons from the field, and practical insights to get your organization agent-ready.

RSVP →

Helpful resources

Thanks for reading Auth Thoughts! If you’d like any other updates from the world of identity and authentication included in this newsletter, please let us know by replying to this email.

Here are some other links to have handy:

🖥️ Sign up for a Descope Free Forever account

✍️ Developer blogs, if you’re looking for tutorials with specific frameworks

📚 Documentation, for Descope setup instructions, SDK code snippets, and more

See you next month!

33:[null,["$","div",null,{"className":"w-full flex-1 overflow-y-auto overflow-x-hidden pt-1 pb-[30vh]","children":["$","$L53",null,{"emails":[{"key":"pt1_k97vh2bcn08mq8aytqhgbsc7x18e3pvg","subject":"Gartner® Report: IAM Adapts to Secure and Enable AI Agents","previewText":"Access your complimentary copy of the 2026 Gartner report on agentic identity use cases and guidance.","dayOffset":0,"categoryLabel":"Newsletter","jsx":"$54","html":"$55","width":672},{"key":"pt1_k97tqxzysqmt34e5knzadv3c898e3gp8","subject":"Descope April Product Updates","previewText":"Welcome to Auth Thoughts! Read on for Descope product updates and the latest from the world of identity and authentication.","dayOffset":18,"categoryLabel":"Newsletter","jsx":"$56","html":"$57","width":672},{"key":"pt1_k97h1f27m33q1qztfkyy39gmd98e2prv","subject":"Webinar: Tips to Navigate B2B2X Identity Complexity","previewText":"On-demand webinar with KuppingerCole on providing frictionless, secure identity journeys for business customers and partners.","dayOffset":35,"categoryLabel":"Newsletter","jsx":"$58","html":"$59","width":672},{"key":"pt1_k97rzvww33cnxjc4wm1dy339qs8e3jc3","subject":"Descope May Product Updates","previewText":"Welcome to Auth Thoughts! Read on for Descope product updates and the latest from the world of identity and authentication.","dayOffset":46,"categoryLabel":"Newsletter","jsx":"$5a","html":"$5b","width":672},{"key":"pt1_k97w5wkmc866td2yyqgha44cr18e3xpp","subject":"Descope June Product Updates","previewText":"Welcome to Auth Thoughts! Read on for Descope product updates and the latest from the world of identity and authentication.","dayOffset":78,"categoryLabel":"Newsletter","jsx":"$5c","html":"$5d","width":672},{"key":"pt1_k97sz7ska6zb6dhy5dkfvcrnw18e3xs2","subject":"Descope July Product Updates","previewText":"Welcome to Auth Thoughts! Read on for Descope product updates and the latest from the world of identity and authentication.","dayOffset":111,"categoryLabel":"Newsletter","jsx":"$5e","html":"$5f","width":672},{"key":"pt1_k97wadevf40vfqev9vzggyw60h8e2cm0","subject":"Self-service agent SSO, MCP tutorials & other updates","previewText":"Welcome to Auth Thoughts! Read on for Descope product updates and the latest from the world of identity and authentication.","dayOffset":140,"categoryLabel":"Welcome","jsx":"$60","html":"$61","width":672}],"brand":{"domain":"descope.com","name":"Descope"}}]}],"$L62"]

Never let a signup go cold again.

Gartner® Report: IAM Adapts to Secure and Enable AI Agents

Never let a signup go cold again.

Gartner® Report: IAM Adapts to Secure and Enable AI Agents