WorkOS

What is WorkOS?

WorkOS is a developer platform that provides APIs and SDKs for adding enterprise-ready features such as single sign-on, directory synchronization, and audit logging to applications. It supports SAML and OIDC identity providers through a unified integration. The service is accessed via RESTful APIs with SDKs available for Node.js, Ruby, Python, .NET, Go, PHP, and Java.

What are the features of WorkOS?

• Enterprise single sign-on

  Supports any SAML or OIDC identity provider through a single integration point, returning access tokens and normalized user profile data.
• Directory synchronization (SCIM)

  Syncs user lifecycle events from corporate directories including Okta, Entra ID, ADFS, BambooHR, and Rippling using webhook events.
• Authentication toolkit (AuthKit)

  Provides flexible authentication UI components powered by Radix, supporting social login, passwordless magic links, and multi-factor authentication.
• Admin portal

  A hosted, brand-customizable interface allowing corporate IT administrators to self-serve their own SSO and directory setup without developer intervention.
• Audit logs

  Enables event logging, querying, exporting, and streaming for application activity.
• Fine-grained authorization (FGA)

  Manages role-based access control and permissions for resources within an application.

What are the use cases of WorkOS?

• Selling to enterprise customers

  Application developers can meet IT requirements like SSO and SCIM provisioning to close deals that require enterprise security features.
• Self-service customer onboarding

  SaaS teams can send IT administrators a link to the Admin Portal so they configure identity provider connections independently.