WorkOS Emulate runs the WorkOS API on your own machine, so your tests can seed real data, drive full login flows, and force failures without touching prod.
Agents that call third-party APIs on behalf of users normally hold the OAuth access token. Here is where that token leaks, and how to get delegated access without it.
Sierra's MCP gateway iceberg is a field report on agent auth: identity, per-tool scopes, consent, and audit are the submerged mass, and they ship off the shelf.
RAR, DPoP, CIMD and Transaction Tokens get cited as the answer for AI agents. What each one actually binds, and three problems none of them solves yet.
Pipes Connection Sharing lets an admin connect a provider once for the whole organization. When it beats per-user OAuth, and what changes in your code.
WorkOS now writes Audit Log events for sign-ins and membership changes. What gets captured, what does not, and why turning it on is not retroactive.
DX Deputy CTO Justin Reock on why PR throughput keeps climbing, AI spend is up 50x, and the data still shows no clear return on agentic coding tools yet.
A workforce identity offboarding checklist for IT and security teams: what to disable, revoke, transfer, and rotate in each app, and the evidence to keep.
A SaaS access review checklist for IT teams: reconcile accounts and grants, record decisions, assign remediation, and verify app access changed as intended.
How workforce and customer identity differ, how they connect in B2B software, and which team owns sign-in, membership, permissions, and access removal.
SSO handles employee sign-in, and SCIM keeps app accounts and groups in sync with your directory. Learn where offboarding gaps appear and what to ask vendors.
An employee onboarding access checklist for approved apps and roles, account setup, first sign-in, and evidence that day-one access works for each new hire.
Learn how workforce identity manages employee and contractor access, how SSO and provisioning fit together, and what to check before choosing a system.
A contractor access management checklist for sponsors, approved scope, end dates, renewal decisions, and evidence that temporary access was removed from apps.
An employee role change access checklist: compare old and new grants, approve handover exceptions, remove unneeded permissions, and verify the changes in apps.
Snyk's Randall Degges on reachability analysis, the price of context, and why the tools your agent uses are the weakest security spot in the industry today.
How your identity provider can grant AI agents access to work apps, without a consent screen for every app and every agent.
What Okta’s Agent SSO launch reveals about the unfinished standards behind cross-company agent identity.
Please try a different search
Our global team is growing and we’re hiring all types of roles.
WorkOS builds developer tools for quickly adding enterprise features to applications.
We use cookies for analytics and advertising. See our cookie policy for details.
