"ExternalIdentities" is not a named product, so the request is read as external identity management (customer and agent login, SSO, identity journeys). Descope 5 and Auth0 8 are built for this directly, and WorkOS 7 covers enterprise SSO and directory sync; Microsoft Entra agent identities 1 and Okta 6 are also relevant options.
- 1
Descope External IAM Platformdescope.comverified and signed
Builds identity journeys for users, business customers, partners, AI agents and MCP servers via visual workflows, SDKs and APIs 5.
+7 community tools built for it
for agents: authentication · fetch_user_token_tool · fetch_user_token
- 2
Auth0auth0.comverified and signed
Adds login, SSO, MFA and access control to apps and secures AI agents, with an Auth0 MCP Server available 8.
official:MCP server · Auth0 MCP Server+20 community tools built for it
for agents: auth0 · openid · auth0-express
- 3
WorkOSworkos.comfound in code, not yet checked
Provides SAML and OIDC single sign-on, directory sync and user management for enterprise identity features 7.
official:MCP server · WorkOS+5 community tools built for it
for agents: call_integration_api · connect_integration · workos
- 4
Microsoft Entra Agent IDmicrosoft.comverified and signed
Provisions Entra Agent Identity Blueprints and per-instance agent identities through Microsoft Entra 1.
official:MCP server · Playwright MCP ServerSDK · markitdownlibrary · windows-sysCLI · playwright-mcppackage · Azure DevOps (ADO)+151 community tools built for it
for agents: entra-agent-id · B2C · Library
- 5
Oktaokta.localfound in code, not yet checked
Connects Okta identity to automations and exposes an Okta API for reading users and identity provider configurations 6.
official:API · Users (Okta API)+27 community tools built for it
for agents: okta_get_idp_config · custom_api_call · get_user
Sources
- 1Microsoft – AI, Cloud, Productivity, Computing, Gaming & Appsmicrosoft.com · read 2026-10-29
- 5Descope | Customer and Agentic Identity Platformdescope.com · read 2026-10-29
- 6Okta integration | Activepiecesactivepieces.com · read 2026-10-29
- 7WorkOS — Your app, Enterprise Ready.workos.com · read 2026-10-29
- 8Secure AI Agent & User Authentication | Auth0auth0.com · read 2026-10-29
For agents: the 10 actions behind this answer
entra-agent-id · entra-agent-id verified and signed
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPri
access-identity-providers-add-an-access-identity-provider · Cloudflare API verified and signed
Add an Access identity provider
emailLogin · Vercel API verified and signed
Login with email
arize-ai-provider-integration · arize-ai-provider-integration verified and signed
Creates, reads, updates, and deletes Arize AI integrations that store LLM provider credentials used by evaluators and other Arize features. Supports any LLM provider (e.g. OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, Vertex AI, Gemini, NVIDIA NIM). Use when the user mentions AI integration, LLM pro
authentication · @descope/core-js-sdk verified and signed
okta_get_idp_config · okta-tea-ai-assistant found in code, not yet checked
Audit Okta Identity Provider (IdP) configurations — checks whether any IdPs have
call_integration_api · pipes-mcp found in code, not yet checked
Call any integrated provider API (Linear, Notion, Snowflake) with automatic authentication token injection.
auth0 · auth0 verified and signed
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
Amazon · AWSSDK - CognitoIdentityProvider verified and signed
GetAccountsAccountExternalAccountsId · Stripe API verified and signed
<p>Retrieve a specified external account for a given account.</p>
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.