Blog

A critical vulnerability in Microsoft's multi-factor authentication (MFA) system has been discovered by Oasis Security's research team, allowing attackers to bypass time-based one-time passwords (TOTPs) through brute force methods.

Step-by-step tutorial that walks you through the necessary steps to add SSO to your app using SAML, Entra ID (Azure AD), Node, and WorkOS.

Step-by-step tutorial that walks you through the necessary steps to add Log in with GitHub to your app using Go and WorkOS.

Organization roles, custom OAuth scopes, accept invitation API, AuthKit role assignment via SSO

Step-by-step tutorial that walks you through the necessary steps to add SSO to your app using SAML, Okta, Node, and WorkOS.

An often overlooked but important component of identity management is customer onboarding.

Launch Week recap (FGA, Radar, Passkeys, Widgets, Actions, Entitlements, Next.js Starter Kit) and more

Compare WorkOS, Auth0, and Stytch to learn what each does, its features, and which one you should use.

Learn what makes Google Zanzibar the best authorization solution and how WorkOS FGA builds on top of these features.

Learn about the failed authentication events you can get from WorkOS and how you can use them to implement features in your app.

In this tutorial, paired with companion code, you’ll learn to build a secure, scalable document access control system using WorkOS FGA, AWS Lambda Authorizers, and Amazon S3.

Learn how to map groups from external identity providers to user roles in your app using SSO or SCIM.

WorkOS is introducing Entitlements powered by Stripe: one-button setup for enabling immediate, subscription-based access to plans, features, and products. Entitlements are available to all AuthKit customers for free.

Every business starts with an idea, followed by the challenge of picking the right tech stack. In a crowded field where choosing the right technology is key yet time-consuming, starter kits help you focus on building your idea rather than reinventing the basics. That’s why we’re announcing the WorkOS-built Next.js B2B Starter Kit today.

We often think of auth as a binary decision—allowed or denied—but what if you want to factor in private knowledge or custom logic at runtime? Actions let you change how WorkOS behaves and customize user registration and authentication logic with AuthKit. Actions are also free to all AuthKit customers.