WorkOS

Founded in 2019. Privately Held.

External links: homepage | docs | blog | jobs | youtube | twitter | github | linkedin

Enterprise features as a service.

Blog content published by word count

Switch to post count

Blog content

post title author published words HN
How Zendesk used enterprise features to grow from $1 million to $1 billion in 12 years - Feb. 15, 2021 2093 -
2023 Product Updates Recap Min Kim Dec. 29, 2023 322 -
5 Lessons We Learned Adding Dark Mode to WorkOS Zeno Rocha Aug. 12, 2021 853 7
A Developer’s Guide To Headless CMSs - Mar. 10, 2021 2875 -
A Developer’s Guide to Startup Security: 5 Common Threats - Jul. 09, 2021 1361 -
A Developer’s Guide to Startup Security: 15 Ways to Secure Your Startup (Part 2) - Aug. 05, 2021 5807 -
A Developer’s History of Authentication - Sep. 05, 2020 2160 -
A guide to magic links: how they work and why you should use them - Dec. 21, 2020 1624 -
A guide to organization modeling - Feb. 16, 2024 1537 -
Active Directory SCIM - Can you sync Active Directory users and groups with SCIM? - Mar. 06, 2024 1080 -
April Updates Min Kim May. 01, 2024 303 -
August Product Updates Min Kim Aug. 31, 2023 328 -
Auth0 pricing: how it works and compares to WorkOS Min Kim Jan. 30, 2024 595 -
Authentication Protocols: Your Guide to the Basics - Oct. 14, 2020 1165 -
Authentication vs. Authorization - Sep. 20, 2020 1764 -
Build vs. Buy: 5 Questions to Ask When You Need to Offer SSO or Directory Sync - Sep. 30, 2021 1040 -
Building Webhooks Into Your Application: Guidelines and Best Practices - Oct. 04, 2020 2044 3
CCPA vs. GDPR: How location affects enterprise compliance - Jul. 06, 2021 2332 -
WorkOS Technical Content Style Guide Celestine Kao Nov. 18, 2020 908 2
Creating stronger passwords with AuthKit Paul Asjes Feb. 08, 2024 1505 -
Crossing the Enterprise Chasm Michael Grinich Jul. 06, 2020 1445 -
Directory Sync now maps custom attributes without custom code Shana Vu Oct. 28, 2021 825 -
Deciphering SCIM Complexity: Navigating Group Fragmentation Ash Godfrey Sep. 14, 2023 1120 -
Decoding and Solving the Five Most Common SAML Errors Jônatas Santos Jun. 09, 2023 2253 -
Directory Sync - How to Provision Users onto Your SaaS App From Microsoft Entra, Google Workspace and More - Jan. 03, 2024 1767 -
A Guide to Enterprise Sales for Early-stage Founders - Dec. 23, 2020 3095 -
When Is It a Good Time to Start Enterprise Sales? Herbert Lui Sep. 22, 2021 1419 -
Every SCIM Attribute Explained - Dec. 20, 2023 1663 -
February Updates Min Kim Feb. 29, 2024 209 -
Frictionless Enterprise Customer Onboarding Using the WorkOS Admin Portal Mahmoud Abdelwahab Feb. 28, 2022 725 -
Fun with SAML SSO Vulnerabilities and Footguns Celestine Kao Sep. 01, 2020 3098 17
Developers: Your GDPR Compliance Guidebook - Dec. 16, 2020 1847 -
Getting Started with the WorkOS Multi-Factor Authentication API Mahmoud Abdelwahab Apr. 04, 2022 935 -
9 Components of Great Developer and API Documentation - Feb. 17, 2021 2586 -
A Developer’s Guide to One-Time Passwords (OTPs) - Jun. 28, 2021 1921 -
How AI Companies Can Quickly Become Enterprise Ready - Dec. 11, 2023 1668 -
How Being Enterprise Ready Helps Slack Land Big Deals - Jul. 06, 2020 1418 5
How Dropbox used land-and-expand to move upmarket and close big enterprise customers - Aug. 18, 2020 2163 2
How Our Engineering Team Communicates Asynchronously Through Writing Willman Duffy Sep. 21, 2021 1479 -
How to use SCIM with SSO: A Developer's Guide - Oct. 31, 2023 1398 -
IdP vs SP: What is a Service Provider and an Identity Provider? - Nov. 06, 2023 1117 -
Introducing AuthKit and User Management APIs - Nov. 28, 2023 643 -
Introducing Test SSO, an easier way to integrate SSO into your app Amy Hanlon Feb. 26, 2024 322 -
January Product Updates Min Kim Jan. 31, 2024 291 -
What are JSON Web Tokens (JWT) used for? - Jan. 23, 2024 2072 -
Launch Week Day 1: Sessions Paul Asjes Mar. 18, 2024 652 -
Launch Week Day 2: Roles Paul Asjes Mar. 19, 2024 635 -
Launch Week Day 3: Stream WorkOS events to Datadog Amy Hanlon Mar. 20, 2024 420 -
Launch Week Day 4: Cloudflare Workers & Edge support Paul Asjes Mar. 21, 2024 474 -
Launch Week Day 5: Impersonation Paul Asjes Mar. 22, 2024 479 -
March Updates Min Kim Mar. 25, 2024 238 -
November Product Updates Min Kim Dec. 05, 2023 253 -
OAuth and JWT: How To Use Together + Best Practices - Dec. 18, 2023 1947 -
October Product Updates Min Kim Oct. 31, 2023 217 -
OIDC vs SAML: Key Differences and Which to Use - Dec. 14, 2023 1781 -
Optional Stacking in TypeScript Marshall Bowers May. 11, 2021 1179 -
Passport.js to WorkOS Migration Guide Michael Hadley Oct. 25, 2023 708 -
How to pick an identity as a service (IDaaS) provider: A guide for busy startups - Feb. 10, 2021 2176 -
RBAC vs. ABAC: What is the difference between access control models? - Dec. 23, 2020 1628 -
SAML vs. LDAP: How to Choose The Right Protocol - Nov. 08, 2023 1621 -
SAML vs OAuth: What's the Difference + Which should you use? - Mar. 07, 2024 1770 -
What are SCIM Groups? - Jan. 03, 2024 1613 -
5 Examples of SCIM Implementation - Jan. 24, 2024 1543 -
SCIM Integrations For Your SaaS - Nov. 16, 2023 1923 -
SCIM Protocol Explained - Feb. 01, 2024 2179 -
SCIM vs JIT: What’s the Difference - Feb. 09, 2024 1946 -
SCIM vs. LDAP: Key Differences + Which To Use - Nov. 13, 2023 1887 -
SCIM vs SAML: What Each Does and How To Use Them Together - Dec. 22, 2023 2390 -
SCIM 2.0 vs SCIM 1.0 - What’s The Difference Between The Two Versions? - Mar. 26, 2024 1832 -
What is Seamless SSO by Microsoft? Everything You Need To Know - Dec. 05, 2023 1377 -
Security policy document examples for B2B SaaS apps - Sep. 14, 2020 1909 -
September Product Updates Min Kim Sep. 29, 2023 242 -
WorkOS raises $80m in Series B financing, acquires Modulz Michael Grinich Jun. 01, 2022 840 6
How to write your first service level agreement (with tips from Slack, Amazon, and Google) - Dec. 23, 2020 1599 -
SFTP Integrations vs. Native APIs for User Provisioning Ameesha Isaac Oct. 30, 2023 1157 -
SOC 1 vs. SOC 2 vs. SOC 3: Why your company needs compliance to grow - Dec. 23, 2020 2530 -
SP-Initiated v IdP-Initiated SSO - Sep. 23, 2021 502 -
Special offer for all WorkOS customers: Perplexity Enterprise Pro Michael Grinich Apr. 30, 2024 215 -
Single Sign-On: Acronyms Demystified Ash Godfrey Jun. 01, 2023 1672 -
3 Approaches to Add Enterprise SSO to Your App - Apr. 28, 2021 2646 -
SSO vs Federation: Key Differences + How They Work Together - Dec. 26, 2023 1515 -
SSO vs SSL: Does SSO work over SSL? - Feb. 02, 2024 1546 -
WorkOS Summer Release Event Recap - Sep. 24, 2020 1605 -
Can My App Support SSO and Password-based Logins? - Oct. 19, 2021 859 -
How to Test WorkOS Webhooks Locally with ngrok Adam Wolfman Sep. 29, 2021 814 -
The Best 5 SSO Providers to power your SaaS app in 2024 - Nov. 16, 2023 2070 -
The Developer’s Guide to Audit Logs / SIEM - Jul. 27, 2020 1829 9
The Developer’s Guide to Directory Sync / SCIM - Jan. 25, 2024 1902 1
The Developer's Guide to Domain Verification - Nov. 15, 2023 742 -
The Developer’s Guide to SOC 2 Compliance - Sep. 02, 2020 2205 4
The Developer’s Guide to SSO - Oct. 27, 2023 1943 3
The Developer's Guide to User Management - Mar. 25, 2024 3729 -
The Founder's Guide to Developer-led Growth Zeno Rocha Nov. 23, 2022 1152 4
The Guide to Becoming Enterprise Ready for SaaS Product Managers - Nov. 06, 2023 4525 -
The Top 3 SCIM Providers for 2024 - Jan. 19, 2024 1848 -
How Twilio’s developer-led business model enabled a shift to enterprise sales - Dec. 23, 2020 2978 2
UI/UX Best Practices for IdP & SP-Initiated SSO - Aug. 06, 2020 969 6
Understanding CSRF Attacks Ash Godfrey Oct. 04, 2023 672 -
User provisioning: Use it to increase efficiency and security - Dec. 23, 2020 1209 -
What Does Federated Mean in Search, Identity, and Databases? - Dec. 23, 2020 1122 -
What is a SCIM Connector and Which One Should You Use? - Jan. 30, 2024 1568 -
What is an Identity Provider? - Oct. 05, 2023 1017 -
What Is Just-In-Time Provisioning and How Do You Use It? - Nov. 30, 2023 1542 -
What is MFA, and why does your app need it? - Dec. 13, 2023 1955 -
What is SAML and How Does it Work? - Dec. 20, 2023 1695 -
What is SCIM Provisioning? Everything You Need to Know in 5 Minutes - Oct. 10, 2023 1848 -
What Makes a Good Changelog Zeno Rocha Aug. 27, 2021 980 6
WorkOS 2022 Fall Release Zeno Rocha Dec. 08, 2022 453 -
WorkOS 2022 Spring Release Recap Mahmoud Abdelwahab Jul. 11, 2022 464 -
WorkOS 2022 Winter Release Recap Mahmoud Abdelwahab Mar. 23, 2022 678 -
WorkOS acquires Warrant Michael Grinich Apr. 23, 2024 309 9
WorkOS Fall Release Event Recap - Dec. 14, 2020 2167 -
WorkOS is Carbon Neutral Michael Grinich May. 13, 2022 416 -
WorkOS raises $15M to build “Stripe for enterprise-ready features” Michael Grinich Mar. 10, 2021 1590 -
The Guide to Becoming Enterprise Ready for SaaS Product Managers - Nov. 06, 2023 4525 -
How AI Companies Can Quickly Become Enterprise Ready - Dec. 11, 2023 1668 -
SCIM Security: Is the User Provisioning Protocol Secure? - Feb. 23, 2024 1270 -
SCIM for ADFS - Feb. 21, 2024 1060 -
May Updates Min Kim May. 31, 2024 348 -
ADFS vs SSO: Choosing the Right Authentication Solution - Apr. 22, 2024 1373 -
Top 5 Open Source SSO Solutions (Pros, Cons And What to Watch Out For) - May. 01, 2024 2331 -
What does Deprovisioning Mean? - Apr. 05, 2024 1320 -
SAML vs SSO: Are they the same thing? - Feb. 02, 2024 1548 -
LDAP vs Active Directory: Differences + What You Need to Know - Jan. 08, 2024 1698 -
What is Identity Provisioning? - May. 03, 2024 1550 -
SaaS Authentication: The Best Method(s) to Use For Your App - May. 14, 2024 2352 -
What is Automated Provisioning? - Feb. 07, 2024 1810 -
What is IDaaS and What is it Used For? - May. 28, 2024 1612 -
LDAP vs SSO - Mar. 07, 2024 1774 -
You Need a SCIM Server — Here’s the Easiest Way to Create One - May. 30, 2024 1656 -
4 Types of Access Control: What you Need to Know + How to Implement - Apr. 24, 2024 2854 -
OAuth vs OpenID: Understanding the Key Differences - Mar. 18, 2024 1449 -
What is a Directory Service? - Jan. 12, 2024 1368 -
SAML 2.0 vs SAML 1.1 - What’s the difference between the SAML versions? - Dec. 22, 2023 2005 -
Migrating to Next.js App Router with zero downtime Lucas Motta Jun. 24, 2024 1184 2
Auth in Middleware, Or How I Learned to Stop Worrying and Love the Edge Paul Asjes Jun. 25, 2024 1390 -
Why you should rethink your webhook strategy Pantera Arzhintar Jun. 26, 2024 2261 -
From four to five 9s of uptime by migrating to Kubernetes Matheus Lichtnow Jun. 27, 2024 1738 3
Lessons in safe identity linking Alex Southgate Jun. 28, 2024 1669 -
June Updates Min Kim Jul. 01, 2024 318 -
The Developer's Guide to RBAC: Part I - Jul. 11, 2024 2487 -
What is Multi-tenancy? Pros, Cons & Best Practices - May. 08, 2024 1885 -
What is ReBAC? (Relationship-Based Access Control) - May. 10, 2024 1566 -
What is Authentication (AuthN)? - May. 17, 2024 1859 -
The Developer’s Guide to RBAC and IdPs: Part II - Jul. 18, 2024 1910 -
Use cases and benefits of supporting SCIM - Jul. 16, 2024 2029 -
Introducing Role-Based Access Control (RBAC) for AuthKit Min Kim Jul. 23, 2024 560 -
Unlocking the power of SCIM: streamlining enterprise user management - Jul. 16, 2024 2034 -
Single-Tenant vs Multi-Tenant: Which Option is Right for Your SaaS App? - Jun. 18, 2024 1644 -
SSO vs OAuth: Key Differences You Must Know - Jun. 18, 2024 1337 -
The 3 Best Alternatives to SAML SSO - Jun. 18, 2024 1530 -
Implementation challenges of a homegrown SCIM solution - Jul. 30, 2024 2108 -
July Updates Min Kim Aug. 01, 2024 241 -
Build vs buy part I: complexities of building SSO and SCIM in-house Min Kim Jul. 30, 2024 1770 -
Build vs. buy part II: ROI comparison between homegrown and pre-built solutions Min Kim Aug. 22, 2024 2595 -
Managing SAML X.509 Certificates Sheheryar Ali Aug. 26, 2024 1236 -
August Updates Min Kim Sep. 04, 2024 174 -
Auth Glossary - Aug. 26, 2024 1053 -
What is RBAC? How it works and when to use it. - Jul. 17, 2024 1356 -
What is Attribute Based Access Control (ABAC)? - Sep. 03, 2024 1638 -
What is Authorization (AuthZ)? - Aug. 28, 2024 1100 -
Secure authentication for frontend apps with PKCE Maria Paktiti Sep. 20, 2024 887 -
The Developer’s Guide to Auth Sessions - Sep. 27, 2024 1443 -
Session management for frontend apps with AuthKit Maria Paktiti Sep. 27, 2024 1003 -
The five different types of authentication - Sep. 16, 2024 2288 -
What is Fine-Grained Access Control? - Sep. 12, 2024 1537 -
OAuth vs. OAuth 2: Differences + What you need to know - Sep. 18, 2024 1787 -
What are fine-grained permissions? - Sep. 19, 2024 1513 -
Coarse-grained vs. fine-grained access control: which should you use? - Sep. 13, 2024 1375 -
September Updates Min Kim Oct. 01, 2024 262 -
What is OpenID Connect (OIDC)? - Oct. 14, 2024 1871 -
SCIM vs SSO: What's the difference and how do they work together? - Aug. 20, 2024 1099 -
What is Enterprise SSO and why does it matter? - Oct. 15, 2024 1371 -
From RBAC to Fine-Grained Authorization part II: integrate with your app Maria Paktiti Oct. 18, 2024 2134 -
From RBAC to Fine-Grained Authorization part I: design your model Maria Paktiti Oct. 17, 2024 2554 -
What is Single Logout and why is there such limited support for it? - Sep. 30, 2024 2010 -
How SCIM provisioning works - tutorial with API calls - Oct. 24, 2024 1463 -
The Developer’s Guide to Fine-Grained Authorization - Oct. 24, 2024 1896 -
Ruby SAML CVE-2024-45409: As bad as it gets and hiding in plain sight Zack Proser Oct. 23, 2024 1140 -
X.509 certificates: what they are & how to get one - Oct. 22, 2024 1478 -
What is data access control? - Aug. 21, 2024 1848 -
The easiest way to implement SAML in any app - Oct. 30, 2024 1239 -
What is the Azure AD or Entra ID app gallery and why should you care? - Oct. 31, 2024 1221 -
Model your B2B SaaS with organizations Maria Paktiti Nov. 01, 2024 3384 -
How to secure RAG applications with Fine-Grained Authorization: tutorial with code - Nov. 05, 2024 1090 -
Launch Week Day 4: Cloudflare Workers & Edge support Paul Asjes Mar. 21, 2024 474 -
Launch Week Day 2: Roles Paul Asjes Mar. 19, 2024 635 -
Launch Week Day 5: Impersonation Paul Asjes Mar. 22, 2024 481 -
OTP bots explained: what they are and how to stop them - Nov. 04, 2024 1640 -
What is the Okta Integration Network? - Nov. 07, 2024 1306 -
How to add SSO to your app with WorkOS - Nov. 06, 2024 1476 -
Launch Week Day 1: Sessions Paul Asjes Mar. 18, 2024 652 -
Launch Week Day 3: Stream WorkOS events to Datadog Amy Hanlon Mar. 20, 2024 420 -
How to add social logins in your app with WorkOS - Nov. 11, 2024 1393 -
What is an Authentication token? - Nov. 07, 2024 1046 -
Top 5 Google Zanzibar open-source implementations in 2024 - Nov. 08, 2024 1368 -
How SCIM deprovisioning works Maria Paktiti Nov. 08, 2024 1056 -
What is user provisioning? - Nov. 08, 2024 744 -
What is Universal Login and how does it work? - Nov. 08, 2024 1179 -
JWT validation: how-to and best libraries to use Maria Paktiti Nov. 11, 2024 1871 -
ReBAC vs RBAC: What's the difference and which should you choose? - Nov. 08, 2024 792 -
Best practices for CLI authentication: a technical guide Zack Proser Nov. 14, 2024 2258 -
What is SCIM? The ultimate guide - Nov. 13, 2024 4868 -
How SAML certificate renewal works - and what happens when it fails Drew Emery Nov. 14, 2024 985 -
SCIM challenges: navigating the idiosyncrasies of different providers Maria Paktiti Nov. 15, 2024 2017 -
Radar Ryan Cooke Nov. 19, 2024 1048 -
Passkeys, a safer and simpler alternative to passwords Maria Paktiti Nov. 18, 2024 600 -
How to build browser-based OAuth into your CLI with WorkOS Zack Proser Nov. 19, 2024 1610 -
Widgets — ready-made components for complete enterprise features Maria Paktiti Nov. 21, 2024 482 -
Fine-Grained Authorization is now generally available Aditya Kajla Nov. 20, 2024 750 -
Actions — customize AuthKit behavior in real-time Pantera Arzhintar Nov. 21, 2024 727 -
Understanding cross-site scripting (XSS) attacks Maria Paktiti Nov. 15, 2024 1310 -
Next.js B2B Starter Kit — fast-track your SaaS app from 0 to 1 Paul Asjes Nov. 22, 2024 749 3
Entitlements sync between Stripe and your app Dan Dorman Nov. 22, 2024 896 -
RBAC vs. FGA: What's the difference and how do they work together? - Nov. 22, 2024 807 -
How to map role data from identity providers to roles in your app Maria Paktiti Nov. 25, 2024 1323 -
The Ultimate Guide to OIDC providers (or building your own) - Nov. 22, 2024 1517 -
RBAC vs IAM: what's the difference and how do they work together? - Nov. 26, 2024 1228 -
Top 7 API authentication methods and how to use them - Nov. 27, 2024 2729 -
What is entitlement management? A guide to secure access - Nov. 26, 2024 1768 -
The 5 access control models: benefits + which to choose - Nov. 29, 2024 2645 -
8 Role-Based Access Control (RBAC) examples in action - Dec. 02, 2024 1789 -
The complete guide to OAuth 2.0 Maria Paktiti Dec. 05, 2024 3852 -
The 5 best Clerk alternatives in 2024 - Aug. 21, 2024 1716 -
Failed authentication events: use cases and how-to Maria Paktiti Dec. 06, 2024 1623 -
Common SAML security vulnerabilities and how to defend against them Maria Paktiti Dec. 04, 2024 1514 -
What is granular control? Benefits + examples - Aug. 27, 2024 1362 -
How to implement access control: step by step - Aug. 19, 2024 1263 -
7 Attribute-Based Access Control (ABAC) examples - Aug. 29, 2024 1915 -
How to build document access control with S3, WorkOS FGA, and Lambda authorizers Zack Proser Dec. 05, 2024 1553 -
Top user management features for SaaS + implementation tips - Aug. 30, 2024 2203 -
Access management: What it is and how it works - Dec. 10, 2024 3532 -
The 5 best Clerk alternatives in 2024 - Dec. 11, 2024 1707 -
4 WorkOS alternatives + which to choose - Dec. 11, 2024 1875 -
RBAC vs. ACL: what's the difference and how do they work together? - Dec. 11, 2024 1232 -
The ultimate guide to user management in 2024 - Dec. 11, 2024 1975 -
The 5 best Frontegg alternatives in 2024 - Dec. 11, 2024 1818 -
5 best Auth0 alternatives in 2024: head-to-head - Dec. 11, 2024 1945 -
6 best user management services for 2024 - Dec. 11, 2024 1941 -
Why Google Zanzibar shines at building authorization Karan Kajla Dec. 10, 2024 1344 -
SSO best practices Maria Paktiti Dec. 10, 2024 2735 -
The 5 best user management software tools in 2024 - Dec. 12, 2024 2351 -
Auth0 SSO: Is it worth the high cost? - Dec. 12, 2024 1094 -
Auth0 vs. Cognito vs. WorkOS: Which is best in 2024? - Dec. 12, 2024 1994 -
Clerk pricing: How it works and compares to WorkOS - Dec. 12, 2024 788 -
Stytch vs. Auth0 vs. WorkOS: Which is best? - Dec. 12, 2024 1430 -
Frontegg vs. Auth0 vs. WorkOS: which is best in 2024? - Dec. 12, 2024 1306 -
Clerk vs. Auth0 vs. WorkOS: which should you choose? - Dec. 12, 2024 1284 -
November Updates Min Kim Dec. 12, 2024 328 -
FGA’s meaning: definition, benefits, and real-world examples - Dec. 12, 2024 1104 -
Seamless onboarding with the WorkOS Admin Portal Drew Emery Dec. 13, 2024 1900 -
SCIM best practices Maria Paktiti Dec. 16, 2024 1893 -

By Matt Makai. 2021-2024.