Hi descope team! Writing because I have a question regarding the custmisation of the flows. I've been using Python Social Auth and I like it because they have the concept of partial pipelines. In them I'm then able to do different operations based on the social login the user is using. For example, 1. If the user uses Google, I check whether there's a Company in my DB that has the user's email domain. If that's the case, add the user to that Company. 2. If the user uses GitHub, I check whether the user gave my app permission to read that GitHub org(s) and if there's one or more Companies in my DB with one of the user's GitHub org names. If that's the case, ask the user which Company they want to join. How can I do that with your product? Also, how easy could I require also MFA in that flow? By that I mean requiring the user to use Microsoft Authenticator (or something like that).

Hey Tiago 👋 Nice to meet you! I’m from Descope Engineering team About the second use case (MFA), you can choose to add in the sign in flow more steps to implement MFA, for example, add TOTP (Authenticator) sign in as seen in the screenshot below Noting that this will also require that user has a registered authenticator (which can be done on sign up with the “Sign Up / TOTP” set of actions)

Yes, each company is a different business in sort of B2B app

Hi Tiago, Nice to meet you as well 🙂 Regarding your 1st question, we have an option to allow self sign-up to a tenant (company) for specific email domains. So if a user sign-up with that email, he will automatically assigned to that tenant and you’ll receive that information in the JWT. Is that something that suites your use case? Additional info about that can be found also in our tutorial page Also, if you would like to have a short zoom session to discuss that in depth i’ll be happy to schedule one 👍

Hi @rapid-doctor-25622... That'd be great if we could meet to discuss in more detail.