Blog

Picture this: you've built a powerful authorization system based on Google's Zanzibar design, capable of handling complex permission relationships at scale. Now you want to let developers try it out. How can you let them experiment freely without spinning up countless backend environments?

A critical vulnerability in Microsoft's multi-factor authentication (MFA) system has been discovered by Oasis Security's research team, allowing attackers to bypass time-based one-time passwords (TOTPs) through brute force methods.

Learn how to build and scale authentication systems that serve multiple enterprise customers. This guide explores key concepts in multitenant authentication, from managing organization-specific SSO and security policies to avoiding common pitfalls.

Step-by-step tutorial that walks you through the necessary steps to add SSO to your app using SAML, Entra ID (Azure AD), Node, and WorkOS.

Step-by-step tutorial that walks you through the necessary steps to add Log in with GitHub to your app using Go and WorkOS.

Organization roles, custom OAuth scopes, accept invitation API, AuthKit role assignment via SSO

Step-by-step tutorial that walks you through the necessary steps to add SSO to your app using SAML, Okta, Node, and WorkOS.

An often overlooked but important component of identity management is customer onboarding.

Launch Week recap (FGA, Radar, Passkeys, Widgets, Actions, Entitlements, Next.js Starter Kit) and more

Compare WorkOS, Auth0, and Stytch to learn what each does, its features, and which one you should use.

SSO is necessary if you want to sell to enterprise customers, but doing it well is hard. We gathered some best practices that can help you with that.

Learn what makes Google Zanzibar the best authorization solution and how WorkOS FGA builds on top of these features.

Learn about the failed authentication events you can get from WorkOS and how you can use them to implement features in your app.

In this tutorial, paired with companion code, you’ll learn to build a secure, scalable document access control system using WorkOS FGA, AWS Lambda Authorizers, and Amazon S3.

Learn how to map groups from external identity providers to user roles in your app using SSO or SCIM.