WorkOS
What it is
WorkOS provides APIs and hosted tools that help SaaS companies add enterprise features to their applications. Its User Management supports SAML and OIDC identity providers, social authentication, and passwordless email codes. AuthKit includes email and password, magic-code sign-in, MFA, passkeys, organization policies, just-in-time provisioning, role-based access control, and CLI authentication. Directory Sync supports SCIM provisioning and HRIS integrations for user lifecycle management. A hosted Admin Portal lets customer IT administrators configure identity providers and directories, with custom branding and a custom domain available. Developers can work with REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java. Integration guides cover services including Okta, Microsoft Entra ID, Google Workspace, BambooHR, Rippling, Salesforce, Slack, and Stripe. WorkOS lists API, iOS, and web platforms. Accounts include email and in-dashboard support, API status notifications, documentation, and example apps. The pricing model is freemium; SSO and Directory Sync are priced per connection, starting at $125 a month per connection for 1–15 connections.
For and against
For
- Supports SAML and OIDC identity providers
- Directory Sync includes SCIM provisioning and HRIS integrations
- SDKs cover seven listed programming languages
- All accounts include email and in-dashboard support
- AuthKit is free for up to 1 million users
Against
- SSO and Directory Sync are priced per connection
- Custom Domain costs $99 a month
- Enterprise-plan business associate agreements are required for HIPAA
The verdict
WorkOS offers a range of identity and administration building blocks, along with developer tools and support. Teams should account for per-connection SSO and Directory Sync pricing when assessing costs.
Who it suits
WorkOS is aimed at SaaS companies building software for enterprise customers. It may suit teams that need identity, user provisioning, or administration components for their applications.
Plans and prices
AuthKit
Up to 1 million users · additional 1M users $2,500/mo
Read 15 Oct 2026 · workos.com
Standard Support
Email support · in-product web support · API status notifications
Read 15 Oct 2026 · workos.com
Radar
First 1,000 checks free · $100 per 50,000 checks/month
Read 15 Oct 2026 · workos.com
Custom Domain
AuthKit, Admin Portal and email sender domains
Read 15 Oct 2026 · workos.com
Single Sign-On
16–30: $100/connection · 31–50: $80/connection · 51–100: $65/connection
Read 15 Oct 2026 · workos.com
Audit Logs
Event retention $99 per million events stored
Read 15 Oct 2026 · workos.com
Directory Sync
16–30: $100/connection · 31–50: $80/connection · 51–100: $65/connection
Read 15 Oct 2026 · workos.com
Scale Support
Private Slack channel · video calls · technical onboarding · response-time SLAs
Read 15 Oct 2026 · workos.com
Enterprise Support
Dedicated technical account manager · architecture reviews · end-user configuration support · 24x7x365 SLAs
Read 15 Oct 2026 · workos.com
On the record
- Admin Portal
- The dashboard and Admin Portal provide visual configuration for SSO connections, directories and customer onboarding.workos.com · read 15 Oct 2026
- Audit Logs
- Audit Logs lets applications emit compliance events and stream logs to SIEM destinations.workos.com · read 15 Oct 2026
- Authentication
- Its User Management offering supports SAML and OIDC identity providers, social authentication, and passwordless email codes.workos.com · read 10 Oct 2026
- AuthKit features
- AuthKit includes social auth, email and password, magic-code sign-in, MFA, email verification, organization auth policies, JIT provisioning, passkeys, RBAC, and CLI authentication.workos.com · read 10 Oct 2026
- Authorization
- WorkOS documentation lists role-based and fine-grained authorization with custom roles and permissions.workos.com · read 15 Oct 2026
- Bot protection
- Radar detects and blocks bots, fraud and abuse, with geo blocking and credential-stuffing protection.workos.com · read 15 Oct 2026
- CLI
- The WorkOS CLI installs AuthKit integrations and manages organizations, users, roles, permissions, webhooks, feature flags and other resources.workos.com · read 15 Oct 2026
- Company identity
- Crunchbase lists the legal name as WorkOS, Inc., founded by Michael Grinich in 2019 and based in San Francisco.crunchbase.com · read 15 Oct 2026
- Company size
- LinkedIn lists WorkOS as a privately held software-development company with 51–200 employees.linkedin.com · read 15 Oct 2026
- Developer tools
- WorkOS describes REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java.workos.com · read 10 Oct 2026
- Directory Sync
- Directory Sync imports and synchronizes users and groups from corporate directories and HR systems, including SCIM-based services.workos.com · read 15 Oct 2026
- Documentation depth
- Documentation includes product guides, integration guides, migration material, API objects, webhooks, errors, SDK references, tools and a weekly changelog.workos.com · read 15 Oct 2026
- Funding news
- Dealroom reported a $100 million Series C at a $2 billion valuation, led by Meritech and Sapphire, in March 2026.dealroom.co · read 15 Oct 2026
- HIPAA
- WorkOS says it can sign business associate agreements for customers on enterprise plans.workos.com · read 15 Oct 2026
- Integrations
- The integration catalog includes SAML and SCIM providers, HR systems, OAuth services, React Native Expo, Supabase, Stripe and Segment.workos.com · read 15 Oct 2026
- Limit: bot false positives
- A G2 reviewer reports Radar occasionally flagged legitimate users and required rule adjustments.g2.com · read 15 Oct 2026
- Limit: dashboard complexity
- A G2 reviewer describes the dashboard as potentially overwhelming and another says edge-case troubleshooting may require support.g2.com · read 15 Oct 2026
- Limit: integration effort
- Some G2 reviewers say integrations with existing tools required more custom code than expected.g2.com · read 15 Oct 2026
