Descope Client Tenant Provisioning (Onboarding)

Descope Client Tenant Provisioning (Onboarding)

1. 01

   Create a new project in the Descope console for the client

   Log in to the Descope admin console and click 'Create Project'. Name it after the client and select the appropriate region for data residency.

2. 02

   Configure the project's authentication methods

   In the 'Authentication' section, enable passwordless (email magic link, OTP), social login (Google, LinkedIn, GitHub, Microsoft), and MFA options as per the client's requirements.

3. 03

   Set up SSO connections

   Navigate to 'SSO' settings and add up to the plan's limit (e.g., 3 for Free, 5 for Pro). Configure SAML or OIDC with the client's identity provider.

4. 04

   Design the login flow using the visual workflow builder

   Use the drag-and-drop workflow builder to create a branded login journey. Add steps for passwordless, social login, and MFA, and customize the screens to match the client's UX.

5. 05

   Define fine-grained access control policies

   In 'Authorization', create roles and permissions for the client's user types. Use the policy editor to enforce least-privilege access.

6. 06

   Integrate SDKs into the client's application

   Select the appropriate SDK from the 15+ supported languages and follow the integration guide. Use the API endpoints to connect the app to Descope.

7. 07

   Test the authentication flows in a development environment

   Use the 'Test' mode in the console to simulate user journeys. Verify passwordless, SSO, and MFA work as expected before production.

8. 08

   Deploy to production and monitor MAU consumption

   Switch the project to 'Production' mode. Monitor monthly active users (MAUs) and tenant usage in the dashboard to ensure alignment with the client's plan limits.