Blog

AI agents are powerful, but without access control, they can create serious risks. Learn how to manage permissions safely with RBAC, OAuth, and Audit Logs.

Discover the new features from WorkOS Fall Launch Week 2025, including multiple roles in AuthKit, Convex integration, localization, custom email providers, and feature flags in Slack—built to help you ship Enterprise Ready apps faster.

The WorkOS Slack app brings transparency to your feature rollouts, helping teams coordinate better and debug faster.

WorkOS now lets you send transactional emails through your own provider—like SES, Postmark, Resend, or SendGrid—giving you full control over deliverability, reputation, and visibility while keeping the simplicity of WorkOS auth flows.

AuthKit now automatically translates into ~90 languages based on your users' operating system settings.

AuthKit is now the default authentication option for Convex projects, enabling zero config Enterprise Ready authentication for real-time applications

AuthKit now supports assigning multiple roles per organization membership, giving users the union of permissions across roles. This feature eliminates role explosion and makes access control more flexible and intuitive.

A practical guide to securing MCP model–agent interactions: prevent prompt injection, privilege escalation, replay attacks, and data exfiltration with validation gateways, signing, DLP, and scoped creds.

SAML certificates don’t work the same way as web SSL certificates. Here’s why self-signed certificates are the secure, standard choice for SAML, and when a CA-signed certificate might still make sense.

A guide to understanding air-gapped environments, why enterprises rely on them, and how WorkOS can deliver modern authentication even in the most isolated deployments.

The WorkOS team recently hosted a 2-day Enterprise MCP hackathon with approximately 100 attendees.

Discover the top 5 Auth0 alternatives in 2025 — including WorkOS, Microsoft Entra ID, Amazon Cognito, Firebase Authentication, and Keycloak — with a head-to-head comparison and migration tips.

Step-by-step tutorial on integrating Single Sign-On, Multi-Factor Authentication, and Passwordless login into your .NET app with WorkOS.

A developer-friendly guide to Proof Key for Code Exchange (PKCE): how it works, the problems it solves, and why it’s essential for secure OAuth flows, regardless of the application type.

If you’ve built a custom Identity Provider, you’ll need to implement SCIM client functionality yourself. This guide shows you how to build a standards-compliant SCIM 2.0 client that can provision users and groups using WorkOS as the SCIM service provider.