# WorkOS Documentation

> WorkOS provides developer-friendly APIs for enterprise features like Single Sign-On, Directory Sync, User Management, Admin Portal, Audit Logs, and more. This documentation site helps developers implement these features.

This documentation site provides guides, references, and examples for implementing WorkOS features in your applications.

## Postman

- [WorkOS Postman collection](https://workos.com/docs/postman): Test the WorkOS API with Postman.

## On prem deployment

- [Using WorkOS with On-prem Customers](https://workos.com/docs/on-prem-deployment): Best practices for using WorkOS with on-prem customers.

## Glossary

- [Glossary](https://workos.com/docs/glossary): Terminology and concepts used in the WorkOS documentation.

## Email

- [Email delivery](https://workos.com/docs/email): Best practices for sending email with WorkOS.

## Widgets

- [User Sessions Widget](https://workos.com/docs/widgets/user-sessions): A widget for displaying and managing user sessions in your application.
- [User Security Widget](https://workos.com/docs/widgets/user-security): A widget for controlling user security settings in your application.
- [User Profile Widget](https://workos.com/docs/widgets/user-profile): A widget for displaying and managing a user’s profile in your application.
- [User Management Widget](https://workos.com/docs/widgets/user-management): A widget for displaying and managing users in your application.
- [Authorization Tokens](https://workos.com/docs/widgets/tokens): Ensure Widgets have the appropriate permissions in your application.
- [Quick Start](https://workos.com/docs/widgets/quick-start): A step-by-step guide for setting up WorkOS Widgets in your application.
- [Pipes Widget](https://workos.com/docs/widgets/pipes): A widget for displaying and managing connected accounts with Pipes.
- [Organization Switcher Widget](https://workos.com/docs/widgets/organization-switcher): A widget for switching between organizations in your application.
- [Localization](https://workos.com/docs/widgets/localization): Learn how to display Widgets in multiple languages.
- [WorkOS Widgets](https://workos.com/docs/widgets/index): Learn how to integrate WorkOS Widgets in your app.
- [API Keys Widget](https://workos.com/docs/widgets/api-keys): A widget for displaying and managing API Keys.
- [SSO Connection Widget](https://workos.com/docs/widgets/admin-portal-sso-connection): A widget for setting up SSO connections in the Admin Portal.
- [Domain Verification Widget](https://workos.com/docs/widgets/admin-portal-domain-verification): A widget for verifying domains in the Admin Portal.
- [Theme Customization](https://workos.com/docs/widgets/styling/theme-customization): Customize the look and feel of WorkOS Widgets using Radix Themes.
- [Styling](https://workos.com/docs/widgets/styling/index): Customize the look and feel of WorkOS Widgets.
- [CSS Customization](https://workos.com/docs/widgets/styling/css-customization): Customize the look and feel of WorkOS Widgets using CSS.

## Vault

- [Quick Start](https://workos.com/docs/vault/quick-start): A step-by-step guide on how to start using Vault to manage encrypted objects.
- [Key Context](https://workos.com/docs/vault/key-context): User-managed cardinality for keys within Vault.
- [Vault](https://workos.com/docs/vault/index): Encrypt, store, and control access to sensitive data.
- [Bring Your Own Key (BYOK)](https://workos.com/docs/vault/byok): Allow your customers to use their own encryption keys with WorkOS Vault for enhanced security and compliance.

## Single Sign-On

- [Test SSO](https://workos.com/docs/sso/test-sso): Learn how to test your Single Sign-On integration end-to-end.

- [Single Logout](https://workos.com/docs/sso/single-logout): Learn how to implement Single Logout with WorkOS
- [SAML Signing Certificates](https://workos.com/docs/sso/signing-certificates): Verify the authenticity of SAML responses and requests.
- [Sign-in Consent](https://workos.com/docs/sso/sign-in-consent): Learn about the sign-in consent screen, an extra layer of protection against login CSRF attacks and phishing attempts.
- [SAML Security Considerations](https://workos.com/docs/sso/saml-security): Learn about additional SAML features that WorkOS supports.
- [Redirect URIs](https://workos.com/docs/sso/redirect-uris): Learn what a redirect URI is and how it relates to Service Provider and Identity Provider initiated login flows.
- [Login Flows](https://workos.com/docs/sso/login-flows): Learn the differences between SP‑initiated and IdP‑initiated SSO.
- [Launch Checklist](https://workos.com/docs/sso/launch-checklist): Make sure you’re ready to take your app to production.
- [Just-In-Time User Provisioning](https://workos.com/docs/sso/jit-provisioning): Learn how to provision users in your app using Just-In-Time user provisioning.
- [FAQ for IT teams](https://workos.com/docs/sso/it-team-faq): Answers to common questions from your customer’s IT team.
- [Single Sign-On](https://workos.com/docs/sso/index): Facilitate greater security, easier account management, and accelerated application onboarding and adoption.
- [Identity Provider Role Assignment](https://workos.com/docs/sso/identity-provider-role-assignment): Learn how to map role data from identity providers to roles in your app with SSO.
- [Example Apps](https://workos.com/docs/sso/example-apps): View sample Single Sign-On apps for each SDK.
- [Domains](https://workos.com/docs/sso/domains): Understand how Organization domains are used with SSO.
- [Profile Attributes](https://workos.com/docs/sso/attributes): Configure how attributes map from identity providers to SSO Profiles.
- [Sign-In UX](https://workos.com/docs/sso/ux/sign-in): User experience considerations for Single Sign-On.
- [SSO Session Lifecycle](https://workos.com/docs/sso/ux/sessions): Understanding SSO session statuses and their meaning.

## Sdks

- [ruby](https://workos.com/docs/sdks/ruby)
- [python](https://workos.com/docs/sdks/python)
- [php](https://workos.com/docs/sdks/php)
- [node](https://workos.com/docs/sdks/node)
- [laravel](https://workos.com/docs/sdks/laravel)
- [java](https://workos.com/docs/sdks/java)
- [go](https://workos.com/docs/sdks/go)
- [elixir](https://workos.com/docs/sdks/elixir)
- [dotnet](https://workos.com/docs/sdks/dotnet)
- [authkit-tanstack-start](https://workos.com/docs/sdks/authkit-tanstack-start)
- [authkit-remix](https://workos.com/docs/sdks/authkit-remix)
- [authkit-react](https://workos.com/docs/sdks/authkit-react)
- [authkit-react-router](https://workos.com/docs/sdks/authkit-react-router)
- [authkit-nextjs](https://workos.com/docs/sdks/authkit-nextjs)
- [authkit-js](https://workos.com/docs/sdks/authkit-js)

## API Reference

- [API Reference](https://workos.com/docs/reference)
- [admin-portal](https://workos.com/docs/reference/admin-portal)
- [admin-portal - portal-link](https://workos.com/docs/reference/admin-portal/portal-link)
- [admin-portal - portal-link - generate](https://workos.com/docs/reference/admin-portal/portal-link/generate)
- [admin-portal - provider-icons](https://workos.com/docs/reference/admin-portal/provider-icons)
- [api-authentication](https://workos.com/docs/reference/api-authentication)
- [audit-logs](https://workos.com/docs/reference/audit-logs)
- [audit-logs - configuration](https://workos.com/docs/reference/audit-logs/configuration)
- [audit-logs - event](https://workos.com/docs/reference/audit-logs/event)
- [audit-logs - event - create](https://workos.com/docs/reference/audit-logs/event/create)
- [audit-logs - export](https://workos.com/docs/reference/audit-logs/export)
- [audit-logs - export - create](https://workos.com/docs/reference/audit-logs/export/create)
- [audit-logs - export - get](https://workos.com/docs/reference/audit-logs/export/get)
- [audit-logs - retention](https://workos.com/docs/reference/audit-logs/retention)
- [audit-logs - retention - get](https://workos.com/docs/reference/audit-logs/retention/get)
- [audit-logs - retention - set](https://workos.com/docs/reference/audit-logs/retention/set)
- [audit-logs - schema](https://workos.com/docs/reference/audit-logs/schema)
- [audit-logs - schema - create](https://workos.com/docs/reference/audit-logs/schema/create)
- [audit-logs - schema - list](https://workos.com/docs/reference/audit-logs/schema/list)
- [audit-logs - schema - list-actions](https://workos.com/docs/reference/audit-logs/schema/list-actions)
- [authkit](https://workos.com/docs/reference/authkit)
- [authkit - api-keys](https://workos.com/docs/reference/authkit/api-keys)
- [authkit - api-keys - create-for-organization](https://workos.com/docs/reference/authkit/api-keys/create-for-organization)
- [authkit - api-keys - delete](https://workos.com/docs/reference/authkit/api-keys/delete)
- [authkit - api-keys - list-for-organization](https://workos.com/docs/reference/authkit/api-keys/list-for-organization)
- [authkit - api-keys - validate](https://workos.com/docs/reference/authkit/api-keys/validate): Validate an API key and retrieve associated metadata.
- [authkit - authentication](https://workos.com/docs/reference/authkit/authentication)
- [authkit - authentication-errors](https://workos.com/docs/reference/authkit/authentication-errors)
- [authkit - authentication-errors - email-verification-required-error](https://workos.com/docs/reference/authkit/authentication-errors/email-verification-required-error)
- [authkit - authentication-errors - mfa-challenge-error](https://workos.com/docs/reference/authkit/authentication-errors/mfa-challenge-error)
- [authkit - authentication-errors - mfa-enrollment-error](https://workos.com/docs/reference/authkit/authentication-errors/mfa-enrollment-error)
- [authkit - authentication-errors - organization-authentication-required-error](https://workos.com/docs/reference/authkit/authentication-errors/organization-authentication-required-error)
- [authkit - authentication-errors - organization-selection-error](https://workos.com/docs/reference/authkit/authentication-errors/organization-selection-error)
- [authkit - authentication-errors - sso-required-error](https://workos.com/docs/reference/authkit/authentication-errors/sso-required-error)
- [authkit - authentication - code](https://workos.com/docs/reference/authkit/authentication/code)
- [authkit - authentication - email-verification](https://workos.com/docs/reference/authkit/authentication/email-verification)
- [authkit - authentication - get-authorization-url](https://workos.com/docs/reference/authkit/authentication/get-authorization-url)
- [authkit - authentication - get-authorization-url - error-codes](https://workos.com/docs/reference/authkit/authentication/get-authorization-url/error-codes)
- [authkit - authentication - get-authorization-url - pkce](https://workos.com/docs/reference/authkit/authentication/get-authorization-url/pkce)
- [authkit - authentication - get-authorization-url - redirect-uri](https://workos.com/docs/reference/authkit/authentication/get-authorization-url/redirect-uri)
- [authkit - authentication - magic-auth](https://workos.com/docs/reference/authkit/authentication/magic-auth)
- [authkit - authentication - organization-selection](https://workos.com/docs/reference/authkit/authentication/organization-selection)
- [authkit - authentication - password](https://workos.com/docs/reference/authkit/authentication/password)
- [authkit - authentication - refresh-and-seal-session-data](https://workos.com/docs/reference/authkit/authentication/refresh-and-seal-session-data)
- [authkit - authentication - refresh-token](https://workos.com/docs/reference/authkit/authentication/refresh-token)
- [authkit - authentication - session-cookie](https://workos.com/docs/reference/authkit/authentication/session-cookie)
- [authkit - authentication - totp](https://workos.com/docs/reference/authkit/authentication/totp)
- [authkit - cli-auth](https://workos.com/docs/reference/authkit/cli-auth)
- [authkit - cli-auth - device-authorization](https://workos.com/docs/reference/authkit/cli-auth/device-authorization): Initiate the CLI Auth flow by obtaining a device code and verification URLs.
- [authkit - cli-auth - device-code](https://workos.com/docs/reference/authkit/cli-auth/device-code): Exchange a device code for access and refresh tokens during the CLI Auth flow.
- [authkit - cli-auth - error-codes](https://workos.com/docs/reference/authkit/cli-auth/error-codes)
- [authkit - email-verification](https://workos.com/docs/reference/authkit/email-verification)
- [authkit - email-verification - get](https://workos.com/docs/reference/authkit/email-verification/get)
- [authkit - identity](https://workos.com/docs/reference/authkit/identity)
- [authkit - identity - list](https://workos.com/docs/reference/authkit/identity/list)
- [authkit - invitation](https://workos.com/docs/reference/authkit/invitation)
- [authkit - invitation - accept](https://workos.com/docs/reference/authkit/invitation/accept)
- [authkit - invitation - find-by-token](https://workos.com/docs/reference/authkit/invitation/find-by-token)
- [authkit - invitation - get](https://workos.com/docs/reference/authkit/invitation/get)
- [authkit - invitation - list](https://workos.com/docs/reference/authkit/invitation/list)
- [authkit - invitation - resend](https://workos.com/docs/reference/authkit/invitation/resend)
- [authkit - invitation - revoke](https://workos.com/docs/reference/authkit/invitation/revoke)
- [authkit - invitation - send](https://workos.com/docs/reference/authkit/invitation/send)
- [authkit - logout](https://workos.com/docs/reference/authkit/logout)
- [authkit - logout - get-logout-url](https://workos.com/docs/reference/authkit/logout/get-logout-url)
- [authkit - logout - get-logout-url-from-session-cookie](https://workos.com/docs/reference/authkit/logout/get-logout-url-from-session-cookie)
- [authkit - magic-auth](https://workos.com/docs/reference/authkit/magic-auth)
- [authkit - magic-auth - create](https://workos.com/docs/reference/authkit/magic-auth/create)
- [authkit - magic-auth - get](https://workos.com/docs/reference/authkit/magic-auth/get)
- [authkit - mfa](https://workos.com/docs/reference/authkit/mfa): Enroll users in multi-factor authentication for an additional layer of security.
- [authkit - mfa - authentication-challenge](https://workos.com/docs/reference/authkit/mfa/authentication-challenge)
- [authkit - mfa - authentication-factor](https://workos.com/docs/reference/authkit/mfa/authentication-factor)
- [authkit - mfa - enroll-auth-factor](https://workos.com/docs/reference/authkit/mfa/enroll-auth-factor)
- [authkit - mfa - list-auth-factors](https://workos.com/docs/reference/authkit/mfa/list-auth-factors)
- [authkit - organization-membership](https://workos.com/docs/reference/authkit/organization-membership)
- [authkit - organization-membership - create](https://workos.com/docs/reference/authkit/organization-membership/create)
- [authkit - organization-membership - deactivate](https://workos.com/docs/reference/authkit/organization-membership/deactivate)
- [authkit - organization-membership - delete](https://workos.com/docs/reference/authkit/organization-membership/delete)
- [authkit - organization-membership - get](https://workos.com/docs/reference/authkit/organization-membership/get)
- [authkit - organization-membership - list](https://workos.com/docs/reference/authkit/organization-membership/list)
- [authkit - organization-membership - reactivate](https://workos.com/docs/reference/authkit/organization-membership/reactivate)
- [authkit - organization-membership - update](https://workos.com/docs/reference/authkit/organization-membership/update)
- [authkit - password-reset](https://workos.com/docs/reference/authkit/password-reset)
- [authkit - password-reset - create](https://workos.com/docs/reference/authkit/password-reset/create)
- [authkit - password-reset - get](https://workos.com/docs/reference/authkit/password-reset/get)
- [authkit - password-reset - reset-password](https://workos.com/docs/reference/authkit/password-reset/reset-password)
- [authkit - session](https://workos.com/docs/reference/authkit/session)
- [authkit - session-helpers](https://workos.com/docs/reference/authkit/session-helpers): [object Object]
- [authkit - session-helpers - authenticate](https://workos.com/docs/reference/authkit/session-helpers/authenticate)
- [authkit - session-helpers - get-logout-url](https://workos.com/docs/reference/authkit/session-helpers/get-logout-url)
- [authkit - session-helpers - load-sealed-session](https://workos.com/docs/reference/authkit/session-helpers/load-sealed-session)
- [authkit - session-helpers - refresh](https://workos.com/docs/reference/authkit/session-helpers/refresh)
- [authkit - session-tokens](https://workos.com/docs/reference/authkit/session-tokens)
- [authkit - session-tokens - access-token](https://workos.com/docs/reference/authkit/session-tokens/access-token)
- [authkit - session-tokens - jwks](https://workos.com/docs/reference/authkit/session-tokens/jwks)
- [authkit - session-tokens - refresh-token](https://workos.com/docs/reference/authkit/session-tokens/refresh-token)
- [authkit - session - list](https://workos.com/docs/reference/authkit/session/list)
- [authkit - session - revoke](https://workos.com/docs/reference/authkit/session/revoke)
- [authkit - user](https://workos.com/docs/reference/authkit/user)
- [authkit - user - create](https://workos.com/docs/reference/authkit/user/create)
- [authkit - user - delete](https://workos.com/docs/reference/authkit/user/delete)
- [authkit - user - get](https://workos.com/docs/reference/authkit/user/get)
- [authkit - user - get-by-external-id](https://workos.com/docs/reference/authkit/user/get-by-external-id)
- [authkit - user - list](https://workos.com/docs/reference/authkit/user/list)
- [authkit - user - update](https://workos.com/docs/reference/authkit/user/update)
- [client-libraries](https://workos.com/docs/reference/client-libraries)
- [directory-sync](https://workos.com/docs/reference/directory-sync)
- [directory-sync - directory](https://workos.com/docs/reference/directory-sync/directory)
- [directory-sync - directory-group](https://workos.com/docs/reference/directory-sync/directory-group)
- [directory-sync - directory-group - get](https://workos.com/docs/reference/directory-sync/directory-group/get)
- [directory-sync - directory-group - list](https://workos.com/docs/reference/directory-sync/directory-group/list)
- [directory-sync - directory-user](https://workos.com/docs/reference/directory-sync/directory-user)
- [directory-sync - directory-user - get](https://workos.com/docs/reference/directory-sync/directory-user/get)
- [directory-sync - directory-user - list](https://workos.com/docs/reference/directory-sync/directory-user/list)
- [directory-sync - directory - delete](https://workos.com/docs/reference/directory-sync/directory/delete)
- [directory-sync - directory - get](https://workos.com/docs/reference/directory-sync/directory/get)
- [directory-sync - directory - list](https://workos.com/docs/reference/directory-sync/directory/list)
- [domain-verification](https://workos.com/docs/reference/domain-verification)
- [domain-verification - create](https://workos.com/docs/reference/domain-verification/create)
- [domain-verification - get](https://workos.com/docs/reference/domain-verification/get)
- [domain-verification - verify](https://workos.com/docs/reference/domain-verification/verify)
- [errors](https://workos.com/docs/reference/errors)
- [events](https://workos.com/docs/reference/events)
- [events - list](https://workos.com/docs/reference/events/list)
- [feature-flags](https://workos.com/docs/reference/feature-flags)
- [feature-flags - flag](https://workos.com/docs/reference/feature-flags/flag)
- [feature-flags - flag - disable](https://workos.com/docs/reference/feature-flags/flag/disable)
- [feature-flags - flag - enable](https://workos.com/docs/reference/feature-flags/flag/enable)
- [feature-flags - flag - get](https://workos.com/docs/reference/feature-flags/flag/get)
- [feature-flags - flag - list](https://workos.com/docs/reference/feature-flags/flag/list)
- [feature-flags - targeting](https://workos.com/docs/reference/feature-flags/targeting)
- [feature-flags - targeting - add](https://workos.com/docs/reference/feature-flags/targeting/add)
- [feature-flags - targeting - list-for-organization](https://workos.com/docs/reference/feature-flags/targeting/list-for-organization)
- [feature-flags - targeting - list-for-user](https://workos.com/docs/reference/feature-flags/targeting/list-for-user)
- [feature-flags - targeting - remove](https://workos.com/docs/reference/feature-flags/targeting/remove)
- [fga](https://workos.com/docs/reference/fga)
- [fga - access-check](https://workos.com/docs/reference/fga/access-check)
- [fga - access-check - check](https://workos.com/docs/reference/fga/access-check/check)
- [fga - access-check - list-memberships](https://workos.com/docs/reference/fga/access-check/list-memberships)
- [fga - access-check - list-memberships-by-external-id](https://workos.com/docs/reference/fga/access-check/list-memberships-by-external-id)
- [fga - access-check - list-resources](https://workos.com/docs/reference/fga/access-check/list-resources)
- [fga - resource](https://workos.com/docs/reference/fga/resource)
- [fga - resource - create](https://workos.com/docs/reference/fga/resource/create)
- [fga - resource - delete](https://workos.com/docs/reference/fga/resource/delete)
- [fga - resource - delete-by-external-id](https://workos.com/docs/reference/fga/resource/delete-by-external-id)
- [fga - resource - get](https://workos.com/docs/reference/fga/resource/get)
- [fga - resource - get-by-external-id](https://workos.com/docs/reference/fga/resource/get-by-external-id)
- [fga - resource - list](https://workos.com/docs/reference/fga/resource/list)
- [fga - resource - update](https://workos.com/docs/reference/fga/resource/update)
- [fga - resource - update-by-external-id](https://workos.com/docs/reference/fga/resource/update-by-external-id)
- [fga - role-assignment](https://workos.com/docs/reference/fga/role-assignment)
- [fga - role-assignment - create](https://workos.com/docs/reference/fga/role-assignment/create)
- [fga - role-assignment - delete](https://workos.com/docs/reference/fga/role-assignment/delete)
- [fga - role-assignment - delete-by-id](https://workos.com/docs/reference/fga/role-assignment/delete-by-id)
- [fga - role-assignment - list](https://workos.com/docs/reference/fga/role-assignment/list)
- [idempotency](https://workos.com/docs/reference/idempotency)
- [magic-link](https://workos.com/docs/reference/magic-link)
- [magic-link - passwordless-session](https://workos.com/docs/reference/magic-link/passwordless-session)
- [magic-link - passwordless-session - create](https://workos.com/docs/reference/magic-link/passwordless-session/create)
- [magic-link - passwordless-session - send-email](https://workos.com/docs/reference/magic-link/passwordless-session/send-email)
- [mfa](https://workos.com/docs/reference/mfa)
- [mfa - challenge](https://workos.com/docs/reference/mfa/challenge)
- [mfa - challenge - create](https://workos.com/docs/reference/mfa/challenge/create)
- [mfa - challenge - verify](https://workos.com/docs/reference/mfa/challenge/verify)
- [mfa - factor](https://workos.com/docs/reference/mfa/factor)
- [mfa - factor - delete](https://workos.com/docs/reference/mfa/factor/delete)
- [mfa - factor - enroll](https://workos.com/docs/reference/mfa/factor/enroll)
- [mfa - factor - get](https://workos.com/docs/reference/mfa/factor/get)
- [organization](https://workos.com/docs/reference/organization)
- [organization - create](https://workos.com/docs/reference/organization/create)
- [organization - delete](https://workos.com/docs/reference/organization/delete)
- [organization - get](https://workos.com/docs/reference/organization/get)
- [organization - get-by-external-id](https://workos.com/docs/reference/organization/get-by-external-id)
- [organization - list](https://workos.com/docs/reference/organization/list)
- [organization - update](https://workos.com/docs/reference/organization/update)
- [pagination](https://workos.com/docs/reference/pagination)
- [pipes](https://workos.com/docs/reference/pipes)
- [pipes - get-token](https://workos.com/docs/reference/pipes/get-token)
- [radar](https://workos.com/docs/reference/radar)
- [radar - attempts](https://workos.com/docs/reference/radar/attempts)
- [radar - attempts - create](https://workos.com/docs/reference/radar/attempts/create)
- [radar - attempts - update](https://workos.com/docs/reference/radar/attempts/update)
- [radar - lists](https://workos.com/docs/reference/radar/lists)
- [radar - lists - delete](https://workos.com/docs/reference/radar/lists/delete)
- [radar - lists - update](https://workos.com/docs/reference/radar/lists/update)
- [rate-limits](https://workos.com/docs/reference/rate-limits)
- [roles](https://workos.com/docs/reference/roles)
- [roles - organization-role](https://workos.com/docs/reference/roles/organization-role)
- [roles - organization-role - add-permission](https://workos.com/docs/reference/roles/organization-role/add-permission)
- [roles - organization-role - create](https://workos.com/docs/reference/roles/organization-role/create)
- [roles - organization-role - delete](https://workos.com/docs/reference/roles/organization-role/delete)
- [roles - organization-role - get](https://workos.com/docs/reference/roles/organization-role/get)
- [roles - organization-role - list](https://workos.com/docs/reference/roles/organization-role/list)
- [roles - organization-role - remove-permission](https://workos.com/docs/reference/roles/organization-role/remove-permission)
- [roles - organization-role - set-permissions](https://workos.com/docs/reference/roles/organization-role/set-permissions)
- [roles - organization-role - update](https://workos.com/docs/reference/roles/organization-role/update)
- [roles - permission](https://workos.com/docs/reference/roles/permission)
- [roles - permission - create](https://workos.com/docs/reference/roles/permission/create)
- [roles - permission - delete](https://workos.com/docs/reference/roles/permission/delete)
- [roles - permission - get](https://workos.com/docs/reference/roles/permission/get)
- [roles - permission - list](https://workos.com/docs/reference/roles/permission/list)
- [roles - permission - update](https://workos.com/docs/reference/roles/permission/update)
- [roles - role](https://workos.com/docs/reference/roles/role)
- [roles - role - add-permission](https://workos.com/docs/reference/roles/role/add-permission)
- [roles - role - create](https://workos.com/docs/reference/roles/role/create)
- [roles - role - get](https://workos.com/docs/reference/roles/role/get)
- [roles - role - list](https://workos.com/docs/reference/roles/role/list)
- [roles - role - set-permissions](https://workos.com/docs/reference/roles/role/set-permissions)
- [roles - role - update](https://workos.com/docs/reference/roles/role/update)
- [sso](https://workos.com/docs/reference/sso)
- [sso - connection](https://workos.com/docs/reference/sso/connection)
- [sso - connection - delete](https://workos.com/docs/reference/sso/connection/delete)
- [sso - connection - get](https://workos.com/docs/reference/sso/connection/get)
- [sso - connection - list](https://workos.com/docs/reference/sso/connection/list)
- [sso - get-authorization-url](https://workos.com/docs/reference/sso/get-authorization-url)
- [sso - get-authorization-url - error-codes](https://workos.com/docs/reference/sso/get-authorization-url/error-codes)
- [sso - get-authorization-url - redirect-uri](https://workos.com/docs/reference/sso/get-authorization-url/redirect-uri)
- [sso - logout](https://workos.com/docs/reference/sso/logout)
- [sso - logout - authorize](https://workos.com/docs/reference/sso/logout/authorize)
- [sso - logout - redirect](https://workos.com/docs/reference/sso/logout/redirect)
- [sso - profile](https://workos.com/docs/reference/sso/profile)
- [sso - profile - get-profile-and-token](https://workos.com/docs/reference/sso/profile/get-profile-and-token)
- [sso - profile - get-user-profile](https://workos.com/docs/reference/sso/profile/get-user-profile)
- [testing](https://workos.com/docs/reference/testing)
- [vault](https://workos.com/docs/reference/vault)
- [vault - key](https://workos.com/docs/reference/vault/key)
- [vault - key - create-data-key](https://workos.com/docs/reference/vault/key/create-data-key)
- [vault - key - decrypt-data](https://workos.com/docs/reference/vault/key/decrypt-data)
- [vault - key - decrypt-data-key](https://workos.com/docs/reference/vault/key/decrypt-data-key)
- [vault - key - encrypt-data](https://workos.com/docs/reference/vault/key/encrypt-data)
- [vault - object](https://workos.com/docs/reference/vault/object)
- [vault - object - create](https://workos.com/docs/reference/vault/object/create)
- [vault - object - delete](https://workos.com/docs/reference/vault/object/delete)
- [vault - object - get](https://workos.com/docs/reference/vault/object/get)
- [vault - object - get-by-name](https://workos.com/docs/reference/vault/object/get-by-name)
- [vault - object - list](https://workos.com/docs/reference/vault/object/list)
- [vault - object - metadata](https://workos.com/docs/reference/vault/object/metadata)
- [vault - object - update](https://workos.com/docs/reference/vault/object/update)
- [vault - object - version](https://workos.com/docs/reference/vault/object/version)
- [vault - object - versions](https://workos.com/docs/reference/vault/object/versions)
- [widgets](https://workos.com/docs/reference/widgets)
- [widgets - get-token](https://workos.com/docs/reference/widgets/get-token)
- [workos-connect](https://workos.com/docs/reference/workos-connect)
- [workos-connect - applications](https://workos.com/docs/reference/workos-connect/applications)
- [workos-connect - applications - client-secrets](https://workos.com/docs/reference/workos-connect/applications/client-secrets)
- [workos-connect - applications - client-secrets - create](https://workos.com/docs/reference/workos-connect/applications/client-secrets/create)
- [workos-connect - applications - client-secrets - delete](https://workos.com/docs/reference/workos-connect/applications/client-secrets/delete)
- [workos-connect - applications - client-secrets - list](https://workos.com/docs/reference/workos-connect/applications/client-secrets/list)
- [workos-connect - applications - create](https://workos.com/docs/reference/workos-connect/applications/create)
- [workos-connect - applications - delete](https://workos.com/docs/reference/workos-connect/applications/delete)
- [workos-connect - applications - get](https://workos.com/docs/reference/workos-connect/applications/get)
- [workos-connect - applications - list](https://workos.com/docs/reference/workos-connect/applications/list)
- [workos-connect - applications - m2m](https://workos.com/docs/reference/workos-connect/applications/m2m)
- [workos-connect - applications - oauth](https://workos.com/docs/reference/workos-connect/applications/oauth)
- [workos-connect - applications - update](https://workos.com/docs/reference/workos-connect/applications/update)
- [workos-connect - authorize](https://workos.com/docs/reference/workos-connect/authorize)
- [workos-connect - cli-auth](https://workos.com/docs/reference/workos-connect/cli-auth)
- [workos-connect - cli-auth - authorize-device](https://workos.com/docs/reference/workos-connect/cli-auth/authorize-device)
- [workos-connect - cli-auth - device-code-grant](https://workos.com/docs/reference/workos-connect/cli-auth/device-code-grant)
- [workos-connect - introspection](https://workos.com/docs/reference/workos-connect/introspection)
- [workos-connect - metadata](https://workos.com/docs/reference/workos-connect/metadata)
- [workos-connect - metadata - oauth-authorization-server](https://workos.com/docs/reference/workos-connect/metadata/oauth-authorization-server)
- [workos-connect - metadata - openid-configuration](https://workos.com/docs/reference/workos-connect/metadata/openid-configuration)
- [workos-connect - standalone](https://workos.com/docs/reference/workos-connect/standalone)
- [workos-connect - standalone - complete](https://workos.com/docs/reference/workos-connect/standalone/complete)
- [workos-connect - standalone - user-consent-options](https://workos.com/docs/reference/workos-connect/standalone/user-consent-options)
- [workos-connect - token](https://workos.com/docs/reference/workos-connect/token)
- [workos-connect - token - authorization-code-grant](https://workos.com/docs/reference/workos-connect/token/authorization-code-grant)
- [workos-connect - token - authorization-code-grant - access-token](https://workos.com/docs/reference/workos-connect/token/authorization-code-grant/access-token)
- [workos-connect - token - authorization-code-grant - id-token](https://workos.com/docs/reference/workos-connect/token/authorization-code-grant/id-token)
- [workos-connect - token - client-credentials-grant](https://workos.com/docs/reference/workos-connect/token/client-credentials-grant)
- [workos-connect - token - client-credentials-grant - access-token](https://workos.com/docs/reference/workos-connect/token/client-credentials-grant/access-token)
- [workos-connect - token - refresh-token-grant](https://workos.com/docs/reference/workos-connect/token/refresh-token-grant)
- [workos-connect - userinfo](https://workos.com/docs/reference/workos-connect/userinfo)

## RBAC

- [Quick Start](https://workos.com/docs/rbac/quick-start): Set up roles & permissions to model your authorization requirements. Then use the SDK to make access checks from your application.
- [Organization Roles](https://workos.com/docs/rbac/organization-roles): Create and manage custom organization-scoped roles
- [Integrating Role-Based Access Control](https://workos.com/docs/rbac/integration): Utilize Role-Based Access Control across WorkOS products
- [Role-Based Access Control (RBAC)](https://workos.com/docs/rbac/index): Assign roles and manage access for users and organizations
- [IdP Role Assignment](https://workos.com/docs/rbac/idp-role-assignment): Map identity provider groups to roles to automatically assign roles to users
- [Configuration](https://workos.com/docs/rbac/configuration): Configure roles and permissions

## Pipes

- [Providers](https://workos.com/docs/pipes/providers): Explore the third-party providers available for Pipes integrations.
- [Pipes](https://workos.com/docs/pipes/index): Enable your customers to connect their third-party accounts to your application.

## Migrations

- [Migrate from Supabase Auth](https://workos.com/docs/migrate/supabase): Learn how to migrate users from Supabase Auth.
- [Migrate from Stytch](https://workos.com/docs/migrate/stytch): Learn how to migrate users and organizations from Stytch.
- [Migrate from the standalone SSO API](https://workos.com/docs/migrate/standalone-sso): Learn how to migrate your code from an existing WorkOS SSO integration.
- [Migrate from other services](https://workos.com/docs/migrate/other-services): Learn how to export and import users from your own data store.
- [Migrate from Firebase](https://workos.com/docs/migrate/firebase): Learn how to migrate users to WorkOS from Firebase.
- [Migrate from Descope](https://workos.com/docs/migrate/descope): Learn how to migrate users and organizations from Descope.
- [Migrate from Clerk](https://workos.com/docs/migrate/clerk): Learn how to migrate users and organizations from Clerk.
- [Migrate from Better Auth](https://workos.com/docs/migrate/better-auth): Learn how to migrate users and organizations from Better Auth.
- [Migrate from AWS Cognito](https://workos.com/docs/migrate/aws-cognito): Learn how to migrate users to WorkOS from AWS Cognito.
- [Migrate from Auth0](https://workos.com/docs/migrate/auth0): Learn how to migrate users and organizations from Auth0.

## Multi-Factor Auth

- [Multi-Factor Authentication](https://workos.com/docs/mfa/index): A composable API for implementing multi-factor authentication.
- [Example Apps](https://workos.com/docs/mfa/example-apps): View sample Multi-Factor Auth apps for each SDK.
- [Sign-In UX](https://workos.com/docs/mfa/ux/sign-in): User experience considerations for MFA sign-in.
- [Enrollment UX](https://workos.com/docs/mfa/ux/enrollment): User experience considerations for MFA enrollment.

## Magic Link

- [Launch Checklist](https://workos.com/docs/magic-link/launch-checklist): Make sure you’re ready to take your app to production.
- [Magic Link](https://workos.com/docs/magic-link/index): The fastest way to securely enable authentication – passwordless sign-in via email in a couple lines of code.
- [Example Apps](https://workos.com/docs/magic-link/example-apps): View sample Magic Link apps for each SDK.

## Integrations

- [Xero OAuth](https://workos.com/docs/integrations/xero-oauth): Learn how to set up OAuth with Xero
- [Workday](https://workos.com/docs/integrations/workday): Learn about syncing your user list with Workday.
- [VMware](https://workos.com/docs/integrations/vmware-saml): Learn how to configure a connection to VMware via SAML.
- [Vercel OAuth](https://workos.com/docs/integrations/vercel-oauth): Learn how to set up OAuth with Vercel
- [Supabase + WorkOS SSO](https://workos.com/docs/integrations/supabase-sso): Learn how to use WorkOS for SSO with your Supabase application.
- [Supabase + AuthKit](https://workos.com/docs/integrations/supabase-authkit): Learn how to use AuthKit with your Supabase application.
- [Slack OAuth](https://workos.com/docs/integrations/slack-oauth): Learn how to set up OAuth with Slack
- [SimpleSAMLphp](https://workos.com/docs/integrations/simple-saml-php): Learn how to configure a SimpleSAMLphp connection.
- [Shibboleth Unsolicited SAML](https://workos.com/docs/integrations/shibboleth-unsolicited-saml): Learn how to configure a Shibboleth Unsolicited connection via SAML.
- [Shibboleth Generic SAML](https://workos.com/docs/integrations/shibboleth-generic-saml): Learn how to configure a Shibboleth Generic connection via SAML.
- [SFTP](https://workos.com/docs/integrations/sftp): Learn about syncing users with an SFTP connection
- [SCIM](https://workos.com/docs/integrations/scim): Learn about syncing users with a custom SCIM provider
- [SAML](https://workos.com/docs/integrations/saml): Learn how to configure a new custom SAML connection
- [Salesforce SAML](https://workos.com/docs/integrations/salesforce-saml): Learn how to configure a connection to Salesforce via SAML.
- [Salesforce OAuth](https://workos.com/docs/integrations/salesforce-oauth): Learn how to set up OAuth with Salesforce.
- [SailPoint SCIM](https://workos.com/docs/integrations/sailpoint-scim): Learn about syncing users with SailPoint SCIM
- [Rippling SCIM](https://workos.com/docs/integrations/rippling-scim): Learn about syncing your user list with Rippling SCIM v2.0.
- [Rippling SAML](https://workos.com/docs/integrations/rippling-saml): Learn how to configure a connection to Rippling via SAML.
- [React Native Expo](https://workos.com/docs/integrations/react-native-expo): Learn how to integrate WorkOS SSO into a React Native Expo app.
- [PingOne SAML](https://workos.com/docs/integrations/pingone-saml): Learn how to configure a connection to PingOne via SAML.
- [PingFederate SCIM](https://workos.com/docs/integrations/pingfederate-scim): Learn about syncing your user list with PingFederate SCIM.
- [PingFederate SAML](https://workos.com/docs/integrations/pingfederate-saml): Learn how to configure a connection to PingFederate via SAML.
- [Oracle SAML](https://workos.com/docs/integrations/oracle-saml): Learn how to configure a connection to Oracle via SAML.
- [OneLogin SCIM](https://workos.com/docs/integrations/onelogin-scim): Learn about syncing your user list with OneLogin SCIM.
- [OneLogin SAML](https://workos.com/docs/integrations/onelogin-saml): Learn how to configure a connection to OneLogin via SAML.
- [Okta SCIM](https://workos.com/docs/integrations/okta-scim): Learn about syncing your user list with Okta SCIM.
- [Okta SAML](https://workos.com/docs/integrations/okta-saml): Learn how to configure a connection to Okta via SAML.
- [Okta OIDC](https://workos.com/docs/integrations/okta-oidc): Learn how to configure a connection to Okta via OIDC.
- [OpenID Connect](https://workos.com/docs/integrations/oidc): Learn how to configure a new generic OIDC connection
- [NextAuth.js](https://workos.com/docs/integrations/next-auth): Create a Next.js application with WorkOS SSO and NextAuth.js.
- [NetIQ](https://workos.com/docs/integrations/net-iq-saml): Learn how to configure a connection to NetIQ via SAML.
- [miniOrange](https://workos.com/docs/integrations/miniorange-saml): Learn how to configure a connection to miniOrange via SAML.
- [Microsoft OAuth](https://workos.com/docs/integrations/microsoft-oauth): Learn how to set up OAuth with Microsoft
- [Microsoft AD FS SAML](https://workos.com/docs/integrations/microsoft-ad-fs-saml): Configure a connection to Microsoft Active Directory Federation Services.
- [Login.gov OpenID Connect](https://workos.com/docs/integrations/login-gov-oidc): Learn how to configure a connection to Login.gov via OIDC.
- [LinkedIn OAuth](https://workos.com/docs/integrations/linkedin-oauth): Learn how to set up OAuth with LinkedIn
- [LastPass](https://workos.com/docs/integrations/lastpass-saml): Learn how to configure a connection to LastPass via SAML.
- [Keycloak](https://workos.com/docs/integrations/keycloak-saml): Learn how to configure a connection to Keycloak via SAML.
- [JumpCloud SCIM](https://workos.com/docs/integrations/jumpcloud-scim): Learn about syncing your user list with JumpCloud SCIM.
- [JumpCloud SAML](https://workos.com/docs/integrations/jumpcloud-saml): Learn how to configure a connection to JumpCloud via SAML.
- [Intuit OAuth](https://workos.com/docs/integrations/intuit-oauth): Learn how to set up OAuth with Intuit
- [HiBob](https://workos.com/docs/integrations/hibob): Learn about syncing your user list with HiBob.
- [Google SAML](https://workos.com/docs/integrations/google-saml): Learn how to configure a connection to Google Workspace via SAML.
- [Google OIDC](https://workos.com/docs/integrations/google-oidc): Learn how to configure a connection to Google via OIDC.
- [Google OAuth](https://workos.com/docs/integrations/google-oauth): Learn how to set up OAuth with Google Workspace
- [Google Directory Sync](https://workos.com/docs/integrations/google-directory-sync): Learn about syncing your user list with Google Workspace.
- [GitLab OAuth](https://workos.com/docs/integrations/gitlab-oauth): Learn how to set up OAuth with GitLab
- [GitHub OAuth](https://workos.com/docs/integrations/github-oauth): Learn how to set up OAuth with GitHub
- [Fourth](https://workos.com/docs/integrations/fourth): Learn about syncing your user list with Fourth.
- [Firebase](https://workos.com/docs/integrations/firebase): Add Single Sign-On to your Firebase application with WorkOS.
- [Entra ID SCIM (formerly Azure AD)](https://workos.com/docs/integrations/entra-id-scim): Learn about syncing your user list with Entra ID SCIM.
- [Entra ID SAML (formerly Azure AD)](https://workos.com/docs/integrations/entra-id-saml): Learn how to configure a connection to Entra ID via SAML.
- [Entra ID OIDC (formerly Azure AD)](https://workos.com/docs/integrations/entra-id-oidc): Learn how to configure a connection to Entra ID via OIDC.
- [Duo](https://workos.com/docs/integrations/duo-saml): Learn how to configure a connection to Duo via SAML.
- [CyberArk SCIM](https://workos.com/docs/integrations/cyberark-scim): Learn about syncing your user list with CyberArk SCIM.
- [CyberArk SAML](https://workos.com/docs/integrations/cyberark-saml): Learn how to configure a connection to CyberArk via SAML.
- [Cloudflare](https://workos.com/docs/integrations/cloudflare-saml): Learn how to configure a connection to Cloudflare via SAML.
- [Clever OIDC](https://workos.com/docs/integrations/clever-oidc): Learn how to configure a connection to Clever via OIDC.
- [ClassLink](https://workos.com/docs/integrations/classlink-saml): Learn how to configure a connection to ClassLink via SAML.
- [Cezanne HR](https://workos.com/docs/integrations/cezanne): Learn about syncing your user list with Cezanne HR.
- [CAS SAML](https://workos.com/docs/integrations/cas-saml): Learn how to configure a connection to CAS via SAML.
- [Bubble Plugin](https://workos.com/docs/integrations/bubble): Add WorkOS features to your Bubble application.
- [Breathe HR](https://workos.com/docs/integrations/breathe-hr): Learn about syncing your user list with Breathe HR.
- [BambooHR](https://workos.com/docs/integrations/bamboohr): Learn about syncing your user list with BambooHR.
- [AWS Cognito](https://workos.com/docs/integrations/aws-cognito): Learn how to use WorkOS with your existing AWS Cognito applications.
- [Auth0](https://workos.com/docs/integrations/auth0-saml): Learn how to configure a connection to Auth0 via SAML.
- [Auth0 Enterprise Connection](https://workos.com/docs/integrations/auth0-enterprise-connection): Learn how to use WorkOS with your existing Auth0 applications.
- [Auth0 Directory Sync](https://workos.com/docs/integrations/auth0-directory-sync): Learn how to use Directory Sync with your Auth0 applications.
- [Apple](https://workos.com/docs/integrations/apple): Learn how to set up “Sign in with Apple”
- [ADP OpenID Connect](https://workos.com/docs/integrations/adp-oidc): Learn how to configure a connection to ADP via OIDC.
- [Access People HR](https://workos.com/docs/integrations/access-people-hr): Learn about syncing your user list with Access People HR.

## FGA

- [Roles and Permissions](https://workos.com/docs/fga/roles-and-permissions): Define what users can do within specific resource types.
- [Resources](https://workos.com/docs/fga/resources): Represent your application's entities in the FGA hierarchy.
- [Resource Types](https://workos.com/docs/fga/resource-types): Define the schema of your application's resource hierarchy in the WorkOS Dashboard.
- [Resource Discovery](https://workos.com/docs/fga/resource-discovery): Find which resources a user can access, or who has access to a resource.
- [Quick Start](https://workos.com/docs/fga/quick-start): Build a complete authorization model from resource types to access checks in minutes.
- [Fine-Grained Authorization (FGA)](https://workos.com/docs/fga/index): Scalable fine-grained authorization built for B2B SaaS.
- [IdP Role Assignment](https://workos.com/docs/fga/idp-role-assignment): Map identity provider groups to organization roles while preserving resource-scoped access.
- [AuthKit Integration](https://workos.com/docs/fga/authkit-integration): Use FGA with AuthKit for role-aware sessions and seamless authorization.
- [Role Assignments](https://workos.com/docs/fga/assignments): Grant users access to specific resources through role assignments.
- [Access Checks](https://workos.com/docs/fga/access-checks): Ask whether a user can perform an action on a resource.

## Feature Flags

- [Slack Notifications](https://workos.com/docs/feature-flags/slack-notifications): Get notifications about feature flag changes in your Slack workspace.
- [Feature Flags](https://workos.com/docs/feature-flags/index): Manage rollout of new features for specific users and organizations with Feature Flags.

## Events

- [Events](https://workos.com/docs/events/index): Respond to activity that occurs within WorkOS and third-party providers.
- [Stream events to Datadog](https://workos.com/docs/events/observability/datadog): Stream and analyze WorkOS activity in Datadog.
- [Sync data with webhooks](https://workos.com/docs/events/data-syncing/webhooks): A step-by-step guide on how to start syncing data using webhooks.
- [Data syncing](https://workos.com/docs/events/data-syncing/index): Keep your app in sync with WorkOS.
- [Sync data using the events API](https://workos.com/docs/events/data-syncing/events-api): A step-by-step guide on how to start syncing data using the API.
- [Data reconciliation](https://workos.com/docs/events/data-syncing/data-reconciliation): Keep your app in sync with WorkOS.

## Domain Verification

- [Domain Verification](https://workos.com/docs/domain-verification/index): Self-serve domain verification
- [API](https://workos.com/docs/domain-verification/api): Programmatic domain verification

## Directory Sync

- [Understanding the Events Lifecycle](https://workos.com/docs/directory-sync/understanding-events): Understand the lifecycle of the events that occur in Directory Sync.
- [Quick Start](https://workos.com/docs/directory-sync/quick-start): Set up a directory, install the SDK, and integrate Directory Sync.
- [Directory Sync](https://workos.com/docs/directory-sync/index): Build frictionless onboarding for organizations with real‑time user provisioning and deprovisioning.
- [Identity Provider Role Assignment](https://workos.com/docs/directory-sync/identity-provider-role-assignment): Learn how to map role data from identity providers to roles in your app with Directory Sync.
- [Handle Inactive Users](https://workos.com/docs/directory-sync/handle-inactive-users): Learn why inactive users are deleted from directories by default and how to configure this behavior.
- [Example Apps](https://workos.com/docs/directory-sync/example-apps): View sample Directory Sync apps for each SDK.
- [User Attributes](https://workos.com/docs/directory-sync/attributes): Configure how attributes map from directory providers to Directory Users.

## Custom Domains

- [Custom Domains](https://workos.com/docs/custom-domains/index): Configure your integration to match your brand identity.
- [Email Domain](https://workos.com/docs/custom-domains/email): Guidance on configuring a custom domain for emails.
- [AuthKit Domain](https://workos.com/docs/custom-domains/authkit): Guidance on configuring a custom domain for AuthKit.
- [Authentication API Domain](https://workos.com/docs/custom-domains/auth-api): Guidance on configuring a custom domain for the Authentication API.
- [Admin Portal Domain](https://workos.com/docs/custom-domains/admin-portal): Guidance on configuring a custom domains for the Admin Portal.

## AuthKit

- [Users and Organizations](https://workos.com/docs/authkit/users-organizations): Flexible application modeling with user and membership features.
- [Single Sign-On](https://workos.com/docs/authkit/sso): Facilitate greater security, easier account management, and accelerated application onboarding and adoption.
- [SSO with contractors](https://workos.com/docs/authkit/sso-with-contractors): Enforcing organization SSO access with external contractors.
- [Social Login](https://workos.com/docs/authkit/social-login): Quickly and easily integrate with social OAuth providers.
- [Sessions](https://workos.com/docs/authkit/sessions): Learn more about integrating sessions.
- [Roles and Permissions](https://workos.com/docs/authkit/roles-and-permissions): Manage and assign roles and permissions to users.
- [Radar](https://workos.com/docs/authkit/radar): Protecting against bots, fraud and abuse.
- [Pipes](https://workos.com/docs/authkit/pipes): Enable your customers to connect their third-party accounts to your application.
- [Passkeys](https://workos.com/docs/authkit/passkeys): Configuring passkey authentication and enrollment.
- [AuthKit](https://workos.com/docs/authkit/overview): Easy to use authentication APIs designed to provide a flexible, secure, and fast integration.
- [Organization Authentication Policies](https://workos.com/docs/authkit/organization-policies): Customize available authentication methods for each organization.
- [Modeling Your App](https://workos.com/docs/authkit/modeling-your-app): Learn how to architect your WorkOS integration
- [Migrating to AuthKit](https://workos.com/docs/authkit/migrations): Guidance on moving your existing users to WorkOS.
- [Multi-Factor Authentication](https://workos.com/docs/authkit/mfa): Add an additional layer of security to your application.
- [Metadata and External IDs](https://workos.com/docs/authkit/metadata): Store additional information about users and organizations.
- [Model Context Protocol](https://workos.com/docs/authkit/mcp): How to use AuthKit as the authorization server for your MCP server.
- [Magic Auth](https://workos.com/docs/authkit/magic-auth): Maximize user experience and security with passwordless authentication.
- [Get started with AuthKit](https://workos.com/docs/authkit/landing): Set up AuthKit in your app using either the WorkOS CLI or a manual framework-specific guide.
- [JWT Templates](https://workos.com/docs/authkit/jwt-templates): Customize the claims in your application's access tokens.
- [Just-in-time Provisioning](https://workos.com/docs/authkit/jit-provisioning): Automatically provision users and memberships with JIT provisioning.
- [Invite-only signup](https://workos.com/docs/authkit/invite-only-signup): Modeling an invite-only application without a public signup page.
- [Invitations](https://workos.com/docs/authkit/invitations): Easily add users to your application or as members of an organization.
- [AuthKit](https://workos.com/docs/authkit/index): Easy to use authentication platform designed to provide a flexible, secure, and fast integration.
- [Impersonation](https://workos.com/docs/authkit/impersonation): Learn how to sign into your application as one of your users.
- [Identity Linking](https://workos.com/docs/authkit/identity-linking): Automatic deduplication of user credentials across identity providers.
- [Hosted UI](https://workos.com/docs/authkit/hosted-ui): Customizable sign-in UI that abstracts away all of the complexity associated with building secure authentication flows.
- [Example apps](https://workos.com/docs/authkit/example-apps): View sample AuthKit apps.
- [Email Verification](https://workos.com/docs/authkit/email-verification): Learn more about the email verification process.
- [Email + Password](https://workos.com/docs/authkit/email-password): Configuring email and password authentication and requirements.
- [Domain Verification](https://workos.com/docs/authkit/domain-verification): Verify organization domains for secure authentication and provisioning.
- [Directory Provisioning](https://workos.com/docs/authkit/directory-provisioning): Manage users and organization memberships via directory sync providers.
- [Custom Emails](https://workos.com/docs/authkit/custom-emails): Learn how to send your own emails for user lifecycle events.
- [Custom Email Providers](https://workos.com/docs/authkit/custom-email-providers): Learn how to send emails through your own email service provider.
- [Connect](https://workos.com/docs/authkit/connect): Enable other applications to access your users and their identities.
- [CLI Installer](https://workos.com/docs/authkit/cli-installer): Add AuthKit to your project in minutes with a single command. The WorkOS CLI uses AI to detect your framework, install the right SDK, and write the integration code automatically.
- [CLI Auth](https://workos.com/docs/authkit/cli-auth): Quickly add authentication to your command-line application.
- [Branding](https://workos.com/docs/authkit/branding): Customize AuthKit to fit natively with your app’s unique design.
- [API Keys](https://workos.com/docs/authkit/api-keys): Provide secure, self-service API key management to your customers.
- [Actions](https://workos.com/docs/authkit/actions): Customize authentication flows with your own logic.
- [Standalone Connect](https://workos.com/docs/authkit/connect/standalone): Integrate Connect's OAuth API with your existing authentication stack.
- [OAuth Applications](https://workos.com/docs/authkit/connect/oauth): Integrate OAuth applications with WorkOS Connect for web and mobile authentication.
- [M2M Applications](https://workos.com/docs/authkit/connect/m2m): Implement machine-to-machine authentication with WorkOS Connect.
- [Stripe](https://workos.com/docs/authkit/add-ons/stripe): Connect your WorkOS account to Stripe to automatically provision access tokens with entitlements and sync organization seat counts.
- [Segment](https://workos.com/docs/authkit/add-ons/segment): Send AuthKit events to your Segment destinations.
- [Google Analytics](https://workos.com/docs/authkit/add-ons/google-analytics): Track user activity on AuthKit pages in Google Analytics.

## Audit Logs

- [Metadata Schema](https://workos.com/docs/audit-logs/metadata-schema): Define strict JSON Schema for validating event metadata.
- [Log Streams](https://workos.com/docs/audit-logs/log-streams): Stream Audit Log Events to your customers’ SIEM providers.
- [Audit Logs](https://workos.com/docs/audit-logs/index): Ingest and export Audit Log Events from your application.
- [Exporting Events](https://workos.com/docs/audit-logs/exporting-events): Export Audit Log Events through the WorkOS Dashboard and API.
- [Editing Events](https://workos.com/docs/audit-logs/editing-events): Modify existing event configuration with backwards compatibility.
- [Admin Portal](https://workos.com/docs/audit-logs/admin-portal): View Audit Log events for an organization in the WorkOS Admin Portal.

## Admin Portal

- [Admin Portal](https://workos.com/docs/admin-portal/index): A first-class Single Sign-On and Directory Sync onboarding experience for organization admins.
- [Example Apps](https://workos.com/docs/admin-portal/example-apps): View sample Admin Portal apps for each SDK.
- [Custom Branding](https://workos.com/docs/admin-portal/custom-branding): Use your own logo and colors in the Admin Portal.