WorkOS
WorkOS provides APIs and hosted tools for SaaS companies adding enterprise capabilities to their applications.
What WorkOS is
WorkOS provides APIs and hosted tools for SaaS companies adding enterprise capabilities to their applications. User Management supports SAML and OIDC identity providers, social authentication, and passwordless email codes. AuthKit adds options such as MFA, passkeys, email verification, organization authentication policies, just-in-time provisioning, and role-based access control. Directory Sync supports SCIM provisioning and HRIS integrations for user lifecycle management. Customer IT administrators can use the hosted Admin Portal to configure identity providers and directories, with custom branding and a custom domain supported. Developers have REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java. Integration guides cover services including Okta, Microsoft Entra ID, Google Workspace, BambooHR, Rippling, Salesforce, Slack, and Stripe. Accounts include email and in-dashboard support, status notifications, documentation, and example apps.
Good
- Free AuthKit plan covers up to 1 million users
- Supports SAML and OIDC identity providers
- Directory Sync supports SCIM and HRIS integrations
- SDKs cover seven listed programming languages
- Accounts include support, documentation, and example apps
Watch out
- SSO and Directory Sync are priced per connection
- Starting connection price is $125 a month
- Custom domain is listed at $99 / mo
Who it suits
WorkOS suits SaaS developers building enterprise identity, provisioning, and administration features into their products. It is especially relevant when customers need SAML or OIDC sign-in or directory synchronization.
Verdict
WorkOS offers identity and directory building blocks alongside a hosted admin portal and developer tools. Its free AuthKit tier is distinct from per-connection pricing for SSO and Directory Sync.
Plans and prices
From WorkOS's own pricing page, checked 15 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Standard Support | Free | Email support · in-product web support · API status notifications · Free |
| AuthKit | Free | Up to 1 million users · additional 1M users $2,500/mo · Free |
| Radar | Free | First 1,000 checks free · $100 per 50,000 checks/month · Free |
| Custom Domain | $99 a month | AuthKit, Admin Portal and email sender domains · Monthly |
| Single Sign-On | $125 a month | 16–30: $100/connection · 31–50: $80/connection · 51–100: $65/connection · Per connection; 1–15 connections |
| Directory Sync | $125 a month | 16–30: $100/connection · 31–50: $80/connection · 51–100: $65/connection · Per connection; 1–15 connections |
| Audit Logs | $125 a month | Event retention $99 per million events stored · Log streaming per SIEM connection |
| Scale Support | $1,000 a month | Private Slack channel · video calls · technical onboarding · response-time SLAs · Contact sales |
| Enterprise Support | Priced on request | Dedicated technical account manager · architecture reviews · end-user configuration support · 24x7x365 SLAs · Custom |
| Annual Credits | Priced on request | Pre-pay credit discounts · 99.99% uptime SLA · Guided migration and onboarding · Guaranteed support SLA · Schedule a call |
The facts
Each one read from WorkOS's own pages, with the date it was checked.
What it does
- Admin Portal
- The dashboard and Admin Portal provide visual configuration for SSO connections, directories and customer onboarding.checked 15 Oct 2026
- Audit Logs
- Audit Logs lets applications emit compliance events and stream logs to SIEM destinations.checked 15 Oct 2026
- Authentication
- Its User Management offering supports SAML and OIDC identity providers, social authentication, and passwordless email codes.checked 10 Oct 2026
- AuthKit features
- AuthKit includes social auth, email and password, magic-code sign-in, MFA, email verification, organization auth policies, JIT provisioning, passkeys, RBAC, and CLI authentication.checked 10 Oct 2026
- Authorization
- WorkOS documentation lists role-based and fine-grained authorization with custom roles and permissions.checked 15 Oct 2026
- Bot protection
- Radar detects and blocks bots, fraud and abuse, with geo blocking and credential-stuffing protection.checked 15 Oct 2026
- CLI
- The WorkOS CLI installs AuthKit integrations and manages organizations, users, roles, permissions, webhooks, feature flags and other resources.checked 15 Oct 2026
- Developer tools
- WorkOS describes REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java.checked 10 Oct 2026
- Directory sync
- Directory Sync supports SCIM provisioning and HRIS integrations for user lifecycle management.checked 10 Oct 2026
- Directory Sync
- Directory Sync imports and synchronizes users and groups from corporate directories and HR systems, including SCIM-based services.checked 15 Oct 2026
- Documentation depth
- Documentation includes product guides, integration guides, migration material, API objects, webhooks, errors, SDK references, tools and a weekly changelog.checked 15 Oct 2026
- Funding news
- Dealroom reported a $100 million Series C at a $2 billion valuation, led by Meritech and Sapphire, in March 2026.checked 15 Oct 2026
- HIPAA
- WorkOS says it can sign business associate agreements for customers on enterprise plans.checked 15 Oct 2026
- Integrations
- The integration catalog includes SAML and SCIM providers, HR systems, OAuth services, React Native Expo, Supabase, Stripe and Segment.checked 15 Oct 2026
- Limit: bot false positives
- A G2 reviewer reports Radar occasionally flagged legitimate users and required rule adjustments.checked 15 Oct 2026
- Limit: dashboard complexity
- A G2 reviewer describes the dashboard as potentially overwhelming and another says edge-case troubleshooting may require support.checked 15 Oct 2026
- Limit: integration effort
- Some G2 reviewers say integrations with existing tools required more custom code than expected.checked 15 Oct 2026
- Limit: pricing at scale
- G2 reviewers report that per-connection SSO costs can become expensive or rise quickly as connections increase.checked 15 Oct 2026
- Node requirement
- The current Node SDK requires Node.js 22.11 or newer and installs as @workos-inc/node.checked 15 Oct 2026
- Notable release
- WorkOS announced Android and iOS SDK availability in August 2026.checked 15 Oct 2026
- Outage history
- Independent outage tracking records multiple 2026 incidents, including API errors, AuthKit failures, webhook delays and email-delivery delays.checked 15 Oct 2026
- Praise: documentation and support
- G2 reviewers repeatedly praise clear documentation, responsive support and fast SSO or directory-sync implementation.checked 15 Oct 2026
The company
- Company identity
- Crunchbase lists the legal name as WorkOS, Inc., founded by Michael Grinich in 2019 and based in San Francisco.checked 15 Oct 2026
- Company size
- LinkedIn lists WorkOS as a privately held software-development company with 51–200 employees.checked 15 Oct 2026
Alternatives to WorkOS
- 1
Bitwarden
Free planOpen sourceAndroidiOSWebAPI8.6From $1.65 a month - 2
Ory
Free planOpen sourceWebAPILinuxmacOS8.4From $770 a year - 3
StrongKey FIDO Server
Free planOpen sourceAndroidiOSWebAPI7.8Free plan - 4
Descope
Free planAndroidiOSWebAPI7.6From $249 a month - 5
Hanko
Free planAndroidiOSWebAPI7.5From $29 a month - 6
HYPR Authenticate
AndroidiOSWebAPI7.5From $3 a month