Blog

Every provider does SCIM differently. If you don't pay attention, the results can be catastrophic. Read about these differences, the challenges that arise from them, and how WorkOS can help you overcome them.

Learn why it is important for SAML certificates to expire and how having a plan in place to handle expiration can avoid downtime.

Learn what social logins are, how they work, and how you can integrate them into your app using WorkOS.

Google Zanzibar is a globally distributed authorization system that manages permissions at scale. Learn how it works and which open source implementations are right for you.

Learn what is user deprovisioning, how it works with SCIM, and how you can implement it with WorkOS.

What is the Okta App Store or Integration Network (OIN), and should you use it?

Learn why Single Sign-On (SSO) is essential, which are the best practices to follow, and how to add SSO to your app using WorkOS.

With RAG and GenAI applications, how can you ensure users only see results from documents they have permission to access? In this runnable tutorial, we demo using WorkOS Fine-Grained Authorization to secure your documents.

A guide on how to model your SaaS using organizations and WorkOS.

The Microsoft Entra ID app gallery is a collection of thousands of apps pre-integrated with the Microsoft Identity stack. Learn how this gallery can help, and when it's not the right choice.

Implementing SAML on your own can be a challenge. In this article, we’ll show you an easier way of adding SAML support to any app using the WorkOS SSO API.

On September 10th, 2024, a critical security flaw was disclosed in the Ruby-SAML and OmniAuth-SAML libraries, exposing a vulnerability that allows complete authentication bypass. This flaw, CVE-2024-45409, earned the highest possible score of 10 on GitHub's CVE rubric and a 9.8 NIST base score, making it a "worst-case scenario".

Explore the details of Auth0's pricing, its limitations, and what makes WorkOS a more transparent and scalable alternative.

Learn what X.509 certificates are and how to generate them with our comprehensive guide. Easy-to-follow steps included.

Enterprise Ready Conference, HIPAA compliance, frontend sessions, AuthKit branding customization