All Guides

What does it mean to distill a machine learning model or LLM?

Distillation is a technique for creating smaller, faster, and more efficient versions of neural networks while retaining most of their performance.

How to build secure AI agents that are Enterprise Ready

How can you build secure, compliant AI agents while maintaining performance and fostering innovation?

The complete guide to OAuth 2.0

Learn everything you need to know about OAuth: what it is, what problem it solves, and how it works.

Understanding cross-site scripting (XSS) attacks

XSS attacks are not to be taken lightly. Learn what XSS is, the different types of attacks, and how you can defend against them.

SCIM: what it is and how it works

What is SCIM, and why do you need to support it in your SaaS? We’ll discuss the SCIM standard in-depth, how it works, and how you can add SCIM support to your app.

What is OpenID Connect (OIDC)?

Learn what OpenID Connect (OIDC) is, how it works, and when you should use it.

What is Attribute Based Access Control (ABAC)?

Attribute-Based Access Control (ABAC) provides a targeted, more precise way to manage who can see and use different resources and under which conditions.

The developer's guide to RBAC

Authorization often takes a backseat to authentication, but it becomes critical as applications scale and and require finer access control. This blog covers the transition from basic role-based access control (RBAC) to more advanced fine-grained authorization (FGA), offering practical guidance for engineers implementing these systems.

The 4 main types of access control

Learn about the 4 main types of access control, how they work and how to choose the right one for your company.

Enterprise readiness checklist: Steps to scale your business

Learn about enterprise readiness for companies and how WorkOS can help meet large clients' security and compliance needs.

How to get enterprise-ready: Guide for SaaS product managers

Everything you need to get your SaaS enterprise-ready: timing, essential features, build vs. buy decisions, and key pricing considerations.

Understanding CSRF attacks

What is a CSRF attack? Learn how these attacks exploit user trust in web apps and how you can prevent them.

Crossing the Enterprise Chasm

The Enterprise Chasm separates early-adopter users from larger enterprise customers in B2B SaaS apps. Learn which features your app needs to cross it.

The developer’s guide to Directory Sync and SCIM

Learn what SCIM is, why you should care, and how to build it into your app using WorkOS Directory Sync.

The developer’s guide to SSO

Adding SSO to your app is a common requirement for selling to enterprise customers. Here’s a guide that will help you understand SSO and choose the best way to add it to your app.

How to get SOC 2 compliance: A developer’s guide

Learn how to get SOC 2 compliance and how long it takes.

A developer's guide to GDPR compliance

GDRP affects companies the world over and as a developer, it's your job to ensure compliance. Read our guide to the basics to understand what GDPR entails.