# Descope Learning

> A hands-on course series for Descope, the customer identity and access
> management (CIAM) platform. Every course is run against a real Descope
> project the learner owns: the exercises are performed in the Descope
> Console and verified by calling the Descope Management API, rather than
> simulated.

Each link below is the full teaching text of one module, as markdown.

## Fundamentals

Start here. Connect a real project and configure it — everything after this runs against what you build.

### Descope Fundamentals

Learn the platform by configuring your own project — every module ends in work the app checks for real.

- [Descope 101](https://learn.descope.io/c/foundations/descope-101.md): 28 min
- [Authentication](https://learn.descope.io/c/foundations/b2c-authentication.md): 38 min
- [Flows Fundamentals](https://learn.descope.io/c/foundations/flows-fundamentals.md): 49 min
- [Sessions and Tokens](https://learn.descope.io/c/foundations/sessions-and-tokens.md): 33 min
- [MFA and Risk-Based Security](https://learn.descope.io/c/foundations/mfa-and-risk.md): 18 min
- [Authorization](https://learn.descope.io/c/foundations/authorization.md): 32 min
- [SDKs and Application Integration](https://learn.descope.io/c/foundations/sdks-and-integration.md): 25 min
- [Widgets and Delegated Admin](https://learn.descope.io/c/foundations/widgets-and-delegated-admin.md): 21 min
- [Connectors and Extensibility](https://learn.descope.io/c/foundations/connectors-and-extensibility.md): 14 min
- [Applications and Federation](https://learn.descope.io/c/foundations/applications-and-federation.md): 23 min
- [Management and APIs](https://learn.descope.io/c/foundations/management-and-apis.md): 26 min
- [Foundations Capstone](https://learn.descope.io/c/foundations/capstone.md): 24 min
- Foundations Knowledge Check (10 min, interactive — no text form)

## Enterprise

The same platform once your users belong to companies rather than to themselves, and the work that comes with them: moving users in, going live, and finding out what broke.

### Descope Enterprise Identity

Enterprise SSO, tenant-based identity, and the provisioning patterns that arrive with enterprise customers.

- [Tenants](https://learn.descope.io/c/b2b/tenants.md): 26 min
- [Enterprise SSO](https://learn.descope.io/c/b2b/enterprise-sso.md): 35 min
- [Self-Service SSO Setup](https://learn.descope.io/c/b2b/self-service-sso.md): 22 min
- [Authorization at Tenant Scope](https://learn.descope.io/c/b2b/authorization-at-tenant-scope.md): 24 min
- [Enterprise Capstone](https://learn.descope.io/c/b2b/capstone.md): 10 min

### Descope Migration

Move an existing user base across without a hard cutover, or a forced password reset.

- [Migration](https://learn.descope.io/c/migration/migration.md): 13 min

### Going to Production

The work between an integration that functions and one you are willing to launch.

- [Production Readiness](https://learn.descope.io/c/production/production-readiness.md): 21 min

### Troubleshooting and Support

Find out what actually happened, then hand somebody else enough to act on it.

- [Troubleshooting and Support Readiness](https://learn.descope.io/c/troubleshooting/troubleshooting.md): 26 min

## Agentic

The same platform once the caller is not a person — MCP servers, clients, and agents.

### Securing an MCP Server

Put OAuth 2.1 in front of an MCP server and watch the whole handshake happen.

- What you are about to build (4 min, interactive — no text form)
- Project and Management Key (6 min, interactive — no text form)
- Provision the MCP Server (6 min, interactive — no text form)
- How the server is put together (6 min, interactive — no text form)
- Watch the OAuth handshake (7 min, interactive — no text form)
- Prove that scopes are enforced (5 min, interactive — no text form)
- Connect a real client (5 min, interactive — no text form)
- Debrief and clean up (4 min, interactive — no text form)

### Clients and Autonomous Agents

Give an agent its own identity — no human, no consent screen — and govern every client that connects.

- When there is no human (4 min, interactive — no text form)
- What is already connected (5 min, interactive — no text form)
- Give the agent an identity (7 min, interactive — no text form)
- Run the unattended agent (8 min, interactive — no text form)
- Govern the client list (6 min, interactive — no text form)
- Debrief and clean up (4 min, interactive — no text form)