Blog

On September 10th, 2024, a critical security flaw was disclosed in the Ruby-SAML and OmniAuth-SAML libraries, exposing a vulnerability that allows complete authentication bypass. This flaw, CVE-2024-45409, earned the highest possible score of 10 on GitHub's CVE rubric and a 9.8 NIST base score, making it a "worst-case scenario".

Explore the details of Auth0's pricing, its limitations, and what makes WorkOS a more transparent and scalable alternative.

Learn what X.509 certificates are and how to generate them with our comprehensive guide. Easy-to-follow steps included.

Enterprise Ready Conference, HIPAA compliance, frontend sessions, AuthKit branding customization

AuthKit now supports sessions for public clients, like mobile and single-page apps. Use the WorkOS React SDK to keep your users logged in for longer while keeping them safe from attacks.

Learn what PKCE is, why it's essential for securely authenticating users in mobile and single-page apps, and how you can keep your users safe by using AuthKit and WorkOS.

An in-depth look at fine-grained permissions, their benefits, challenges, use cases, and best practices for implementation.

Learn how Log in with Microsoft can lead to a complete account takeover and how you can protect your app and your users.

Certificate renewal flow, organization switching APIs, modeling your app docs, provider icons API

Learn key user management features for SaaS apps like secure login, onboarding, and role management. Get implementation tips with WorkOS.

Explore Attribute-Based Access Control examples across various sectors, including corporate data access, healthcare, finance, and more.

Learn what granular control is, how it works, its benefits, and some practical examples.

Explore Role-Based Access Control examples across industries like corporate, healthcare, finance, education, government, e-commerce, and media.

For high-growth startups, time is the single most important resource. It’s so important that months of delay in shipping SSO and SCIM can result in a potential revenue loss of $7.95M compared to using a pre-built solution. The ROI difference is staggering too: 9% for a homegrown solution vs. 1,954% for a pre-built one. This article explains the methodologies used to calculate these numbers.

Explore why businesses seek Clerk alternatives, featuring top options like WorkOS, Auth0, Okta, Firebase, and OneLogin.