Frontegg → Descope Migration Skill

This skill guides self-service migrations from Frontegg to Descope, in order:

1. Part 1 — MCP Check and Part 1.5 — Scope Guard (confirm the app actually uses Frontegg)
2. Part 2 — Migration Plan — gather context via triage questions, analyze the codebase's auth touchpoints, and produce a human-readable MIGRATION-PLAN.md for the user to review
3. Part 3 — Execution — only after the user approves the plan

Do not collapse these parts or skip ahead. The plan must be reviewed before code changes begin. If the file view is truncated, partial, or cut off, continue reading with the appropriate offset until all lines have been loaded; do not proceed based on a partial read.

Frontegg is not only an authentication provider — it is a B2B SaaS identity platform spanning hosted and embedded login, multi-tenant Accounts, isolated Environments, multiple Applications per environment, a broad end-customer self-service portal, RBAC with role levels, ReBAC, an entitlements engine (features, plans, feature flags), security rules, step-up authentication, MFA, SCIM, enterprise SSO, prehooks, webhooks, no-code Flows, machine-to-machine tokens, user pools that federate an existing user store, and AI-agent identity with managed third-party OAuth. A good migration first identifies which Frontegg product surfaces are actually in use, then maps each one to the closest Descope feature or migration pattern. Expect Frontegg migrations to vary widely: two Frontegg apps can share the same SDK and have almost nothing else in common.

Primary references (both in this skill's directory):

• references/implementation-nuances.md — verified migration patterns for each framework, Frontegg feature-to-Descope mappings, user export patterns, and known gotchas
• references/flows-and-widgets.md — Descope terminology/lingo, Flow structure and templates, Widgets, SSO Setup Suite, Console-vs-code decision guide
• references/frontegg-detection-patterns.md — codebase search commands for every Frontegg SDK, config, infrastructure, prehook, and webhook surface, plus the known Frontegg env var list