> For AI agents: the complete documentation index is at [llms.txt](https://reflex.dev/docs/llms.txt). For a Markdown version, remove the trailing slash from the page URL and append `.md`. The docs home is available at [index.md](http://localhost:3000/docs/index.md).

---
tags: Authentication
description: Add Descope’s identity and authentication platform to your apps to manage user sign-in, onboarding, MFA, SSO, and flows with ease.
---
# Descope Integration

The **Descope Integration** enables your app to leverage Descope’s full Customer Identity & Access Management (CIAM) features—visual authentication flows, identity management, SSO, MFA, tenant isolation, and more. Once set up, you can orchestrate secure user journeys across your application with minimal coding.


```md alert warning
# You must open your app in a new tab from the builder to test the Descope integration.
```

## What You Can Do

With Descope Integration, your app can:
- Handle user sign-up, login, and passwordless flows seamlessly  
- Enable multifactor authentication (MFA), passkeys, and social login  
- Support single sign-on (SSO) via OIDC/SAML  
- Manage users, roles, tenants, and permissions via management APIs  
- Orchestrate onboarding, branding, and multi-tenant flows via drag-and-drop workflows  
- Sync user data with tools like HubSpot or Segment via built-in connectors


## Step 1: Obtain Descope Credentials

![Descope Credentials](https://raw.githubusercontent.com/reflex-dev/integrations-docs/refs/heads/main/images/docs/descope.webp)

1. Log in to the [**Descope Console** (or sign up)](https://www.descope.com/sign-up).
2. Create your first Project. 
3. Go to the Project page under Settings.
4. Copy the `Project ID`.


## Step 2: Configure the Integration in Your App

1. In your app’s settings or integration dashboard, select **Add Descope**.  
2. Enter your **PROJECT_ID**.  
3. (Optional) Pick a **DESCOPE_FLOW_ID** (e.g. “sign-up-or-login”) and **SESSION_SECRET_KEY** or press the Clipboard Copy to use default values.  
4. Click **Connect** to validate credentials and enable Descope features.

![Descope Integration](https://raw.githubusercontent.com/reflex-dev/integrations-docs/refs/heads/main/images/docs/descope_2.webp)