Blog

User provisioning is hard, and there are many things you can get wrong if you do it in-house. We gathered some best practices on SCIM to help you with that.

An often overlooked but important component of identity management is customer onboarding.

Compare Stytch, Auth0, and WorkOS to learn what each does, its features, and which one you should use.

Launch Week recap (FGA, Radar, Passkeys, Widgets, Actions, Entitlements, Next.js Starter Kit) and more

Learn what makes Google Zanzibar the best authorization solution and how WorkOS FGA builds on top of these features.

SSO is necessary if you want to sell to enterprise customers, but doing it well is hard. We gathered some best practices that can help you with that.

Learn about the failed authentication events you can get from WorkOS and how you can use them to implement features in your app.

Learn everything you need to know about OAuth: what it is, what problem it solves, and how it works.

In this tutorial, paired with companion code, you’ll learn to build a secure, scalable document access control system using WorkOS FGA, AWS Lambda Authorizers, and Amazon S3.

Review some of the common SAML security vulnerabilities and see how you can defend against them.

Learn how to map groups from external identity providers to user roles in your app using SSO or SCIM.

Every business starts with an idea, followed by the challenge of picking the right tech stack. In a crowded field where choosing the right technology is key yet time-consuming, starter kits help you focus on building your idea rather than reinventing the basics. That’s why we’re announcing the WorkOS-built Next.js B2B Starter Kit today.

WorkOS is introducing Entitlements powered by Stripe: one-button setup for enabling immediate, subscription-based access to plans, features, and products. Entitlements are available to all AuthKit customers for free.

Widgets are ready-made components that provide complete enterprise features with a few lines of code. They are now available for free to all AuthKit customers.

We often think of auth as a binary decision—allowed or denied—but what if you want to factor in private knowledge or custom logic at runtime? Actions let you change how WorkOS behaves and customize user registration and authentication logic with AuthKit. Actions are also free to all AuthKit customers.