Descope adds Family Accounts to its customer identity platform
Descope has launched Family Accounts, a set of identity primitives designed to model parent-child, guardian-dependent, and multi-household relationships natively within an authentication and authorisation layer. The Los Altos-based vendor describes the release as the first component of a broader relational identity framework built on top of its existing customer and agentic identity platform.
The problem Descope is targeting is structural. Most identity platforms assume a one-user-one-account model borrowed from enterprise software, where every individual holds independent credentials and belongs to a single organisation. Consumer applications frequently violate that assumption: a parent managing a child's healthcare portal, co-parents sharing access to a teenager's banking profile, or a grandparent joining a family streaming plan each require a relationship that standard authentication stacks cannot represent cleanly. Teams have historically worked around this by sharing passwords across a household, which creates attribution and audit problems, or by hand-coding a delegation layer on top of their existing auth system, which is expensive and brittle.
The scale of the gap is notable. Citing AARP and National Alliance for Caregiving data from 2025, Descope notes that 63 million Americans are family caregivers, up 45 per cent over the past decade. Research summarised in JAMA Network Open suggests fewer than three per cent of caregivers hold a designated proxy account, while more than a third use their care recipient's patient portal credentials directly, a pattern that creates obvious risk in regulated settings such as health and financial services.
What the product does
Family Accounts introduces four capabilities. Dependent profiles allow identity records to be created for individuals who cannot or should not authenticate independently, such as children or elderly relatives: these profiles carry attributes and entitlements, link to guardian accounts, and are accessed through a guardian's session rather than their own login flow. Independent guardianship lets multiple unrelated adults serve as co-guardians for the same dependent, each with their own credentials, so removal of one guardian does not affect the other. Family-scoped roles allow the same user to carry different roles and attribute values across multiple households, covering blended families and shared-custody arrangements without custom logic. Multi-family participation extends this so a single user can belong to several households simultaneously.
Dan Sarel, co-founder and chief product officer, said teams have long been "bending multi-tenancy into a household or writing their own delegation layer, leading to overburdened engineering teams, security risks, and inconsistent user experiences." The company says Family Accounts moves these relationships into the identity layer itself, ensuring every action is attributed to the guardian who performed it rather than logged under the dependent's account.
Market context
The customer identity and access management market is well-populated, with Okta's Customer Identity Cloud, Auth0 (part of Okta), Ping Identity, and a number of developer-focused entrants such as Stytch and Clerk all competing on ease of integration and extensibility. Most of these platforms have invested heavily in enterprise workforce identity and passkey support but have been slower to address relational consumer identity patterns. Descope's explicit focus on consumer and agentic use cases positions it in a narrower slice of the CIAM space, one it is attempting to differentiate through low-code workflow tooling and, now, household-level primitives.
From a compliance perspective, consumer identity products that touch healthcare or financial data operate under HIPAA, GDPR, and sector-specific regulations that require clean audit trails and demonstrable access controls. The proxy-account gap Descope cites is precisely the kind of configuration regulators scrutinise when investigating data-access incidents. Products that offer native guardian attribution rather than shared-credential workarounds could carry a defensible compliance story, though customers will need to validate SOC 2 and relevant certifications independently.
Descope counts GoodRx, Linktree, Collectors, and GoFundMe among its existing customers. No pricing details or customer adoption figures for the new feature were disclosed.