WorkOS Emulate runs the WorkOS API on your own machine, so your tests can seed real data, drive full login flows, and force failures without touching prod.
Agents that call third-party APIs on behalf of users normally hold the OAuth access token. Here is where that token leaks, and how to get delegated access without it.
Sierra's MCP gateway iceberg is a field report on agent auth: identity, per-tool scopes, consent, and audit are the submerged mass, and they ship off the shelf.
Forty attorneys general just told a bankruptcy court that a self-reported birthdate isn't age verification. The options you have at signup, what each one keeps, and where each one fails an audit.
When a peer agent posted GO, an OpenAI agent read it as permission. Why agent-to-agent instructions need a delegation you can check, and how RFC 8693 does it.
Revoking an AI agent's access stops new reads but not what it already learned. What OpenAI's dots reveal about deprovisioning, and four controls that help.
C2PA’s exclusion range flaw let a signature verify while covering zero bytes. The same bug hits SAML and JWT. A checklist for verifying what a signature covers.
Wikimedia asked AI companies to make their agents identifiable. Web Bot Auth, an IETF draft already verified by Cloudflare and AWS, does that. The hard part is the policy you attach.
Android now verifies the handset's number and adds it to every Google account signed in on that device. A verified phone describes a SIM, not a person, so don't key customer identity on it.
npm keyed publishing trust on a renameable owner/repo name instead of GitHub's immutable repository ID, exposing 1,500+ packages. The bug, the fix, and the same mistake in your own authorization code.
About 14 million lookups pulled 8.8 million records from Denmark's civil register through one company's lawful access, and every one of them authenticated. How to model third-party access in your own API so population, volume and purpose get checked too.
Google's Gemini coworker agents get their own Workspace account and directory entry. Here is how they reach your app through directory sync, and the decisions your provisioning code owes them.
In late September 2026, we fixed four SAML SSO authentication bypasses where signature verification and identity extraction could disagree on the same response. This post covers the root cause, our response, and guidance for developers who process signed XML.
Your SCIM endpoint is an admin API. A default bearer token and a PATCH path parser left Perforce's open to anyone who knew the token and, in one test, to running code. Here is what to check in your own.
Per-connection prices are easy to compare and rarely the number that decides your bill. Here's a worksheet for estimating enterprise auth costs at 5, 25 and 100 customers.
Pingvin Share X, Better Auth and AshAuthentication each attached a stranger's OAuth sign-in to someone else's account. Here's how each check failed and what a safe linking decision looks like.
Real request bodies from the two directories most enterprise customers use, where they part ways with RFC 7644 and the new interoperability profiles, and how to handle each one without leaving a leaver active.
On-behalf-of tokens (Databricks), live ACL re-checks (AWS), and parent-level fine-grained authorization: how each keeps an AI assistant from showing users data they can't access, and when to use which.
Please try a different search
Our global team is growing and we’re hiring all types of roles.
WorkOS builds developer tools for quickly adding enterprise features to applications.
We use cookies for analytics and advertising. See our cookie policy for details.
