Embedded Login vs. Hosted Login: Which Should You Use?

Descope offers various authentication flow options, including embedded login, hosted login, and native flows, each serving different use cases and environments. Embedded login integrates the authentication UI directly into an application, providing a seamless user experience without redirection, which is ideal for applications where maintaining the same domain is crucial, such as fintech or consumer apps. Hosted login, on the other hand, redirects users to an external URL managed by Descope for authentication, ensuring credential isolation and simplifying compliance, which is beneficial for third-party platforms or when a centralized login page is desired. Mobile apps benefit from Descope's native flows, which render authentication within a webview, preserving the app's look and feel without exposing credentials to the app's frontend. These options can be used in combination, allowing teams to deploy the most suitable method for their specific needs while maintaining a consistent backend configuration managed by Descope.