WorkOS

Freemium

workos.com

Enterprise-readiness platform providing APIs for Single Sign-On, SCIM directory sync, audit logs, and role-based access control.

About WorkOS

WorkOS is the premier enterprise-readiness developer platform, created to help software companies sell to Fortune 500 enterprises without spending quarters building complex enterprise IT integrations. Designed as a single unified API, WorkOS allows engineering teams to make their applications 'Enterprise Ready' by adding enterprise security and compliance features with minimal code.

The platform provides turnkey integrations for enterprise Single Sign-On (supporting Okta, Microsoft Entra ID, PingFederate, and Google Workspace), SCIM automated user provisioning, fine-grained Role-Based Access Control (RBAC), and real-time audit logs compliant with SOC 2 requirements. WorkOS also includes AuthKit, an open-source, beautifully designed authentication UI built in partnership with the creators of Radix UI.

WorkOS operates as a cloud-hosted infrastructure platform with official SDKs for Node.js, Python, Ruby, Go, Java, and PHP. It provides AuthKit and User Management free for up to 1,000,000 monthly active users, offering transparent per-connection pricing for enterprise SSO and SCIM integrations.

Key Features

Core capabilities and technical highlights of WorkOS

Universal Enterprise SSO API supporting dozens of SAML and OIDC identity providers with zero custom protocol code.

SCIM Directory Sync engine automating real-time user provisioning and deprovisioning from enterprise directories.

AuthKit authentication UI built on Radix UI offering pre-built login, multi-factor authentication, and user profiles.

Audit Trail logging API delivering tamper-evident, exportable compliance audit logs for enterprise security teams.

Popular Use Cases

How teams, developers, and creators get value from WorkOS

1Add enterprise SAML Single Sign-On to SaaS platforms to close deals with security-conscious corporate buyers.

2Automate user deprovisioning and team syncing directly from corporate HR directories via SCIM protocols.

3Generate immutable, tamper-evident audit logs of sensitive user actions to satisfy enterprise SOC 2 compliance auditors.

4Deploy AuthKit to provide a modern, pre-built user authentication interface with email logins and social providers.

Frequently Asked Questions

Common questions and answers regarding WorkOS

Is WorkOS free to use?

Yes, WorkOS AuthKit and User Management are completely free for up to 1,000,000 monthly active users, while Enterprise SSO and Directory Sync are billed per active connection.

What does 'Enterprise Ready' mean?

It refers to the compliance and IT requirements—such as SAML SSO, SCIM provisioning, and audit logs—that enterprise buyers demand before buying SaaS tools.

What is AuthKit?

AuthKit is WorkOS's open-source, fully hosted or embedded authentication UI library built with Radix primitives for modern web applications.

Which enterprise identity providers does WorkOS support?

WorkOS supports Okta, Microsoft Entra ID (Azure AD), Google Workspace, PingFederate, OneLogin, JumpCloud, and custom SAML/OIDC.

How does Directory Sync work?

Directory Sync connects with customer IT systems using SCIM to automatically sync employee additions, role changes, and removals into your SaaS app.