ID.me OAuth Provider

Descope provides the flexibility to add custom Social Login (OAuth) providers, including ID.me as an identity provider. This guide will help you configure a custom ID.me OAuth/OIDC provider within the Descope platform.

Creating the ID.me Application

Before integrating the custom OAuth provider in Descope, you must first set up your application on ID.me.

Access ID.me Developer Portal

Go to the ID.me developer portal and select Create application +.

Configuring Application Details

Add your application's details:

1. Application Name: Specify app name.
2. Display name: Specify a user-friendly name to display during the sign-in flow.
3. Redirect URI: This is where users will be redirected after completing authentication. Set the redirect URI to be https://<your-base-url>/v1/oauth/callback.

Below is an example of an application configuration in ID.me:

Creating Descope Custom Provider

In Descope, navigate to the Customize Authentication Methods page and add a new custom provider by selecting + Provider -> Custom. For this example, we will name the provider ID.me.

Configure Account Settings

The values needed to configure Descope can be found in your ID.me application under the Integration tab. In your Descope provider, i the account settings:

• Client ID: Use the Client ID from the ID.me application.
• Client Secret: Use the Client secret from the ID.me application.
• Scopes: The minimum required scopes for using ID.me for login are openid and login. If you need to request other scopes based on the authentication scenario, you can add them here. A full list of supported scopes can be found here.

Configure Connection Settings

Depending on whether you are using the developers.id.me Production environment, developers.id.me Sandbox environment, or the developers.idmelabs.com Sandbox environment, the base URL for the OAuth endpoints will differ.

You will need to input the OIDC endpoints that come from the ID.me well known configuration. Replace BASE_DOMAIN with the OAuth domain for your environment from the table above. The values you will need to input in the Console are listed below.

Below is an example of the production well-known configuration values:

Configure User Attribute Mapping

Map the necessary user attributes based on the information provided by the ID.me user info endpoint. For example, email and name.

For more OAuth provider settings information, check out the OAuth Settings Guide. To add ID.me Social Login to your flow, check out our Social Login In Flows Guide.