WorkOS

Platform providing APIs and building blocks to add enterprise-ready authentication and identity features to applications. Covers Single Sign-On across SAML and OIDC providers, Directory Sync for SCIM and HRIS, user and organization management, social sign-in, and passwordless magic links.

Trusted by teams at Vercel, OpenAI, Cursor, Perplexity, PlanetScale, and Netlify. Differentiates by offering a single integration point for 20+ enterprise identity and directory providers, plus a hosted Admin Portal that lets IT admins self-serve SSO and directory setup without engineering involvement. SDKs available for Node.js, Ruby, Python, Go, PHP, Java, and .NET.

Key features:

• Enterprise SSO with any SAML or OIDC provider, plus social login and magic auth
• AuthKit for customizable hosted authentication UI
• Directory Sync for SCIM provisioning and HRIS integrations
• Admin Portal for IT-admin self-serve onboarding and configuration
• Audit Logs, RBAC, and fine-grained authorization
• REST APIs, webhooks, and real-time directory updates

B2B SaaS teams use WorkOS to ship enterprise SSO and directory sync without building custom IdP integrations. Common scenarios include adding SAML/SCIM for enterprise deals, offloading IT-admin onboarding to the hosted Admin Portal, and syncing users from Okta, Entra ID, BambooHR, or Rippling. Integrates with frameworks like Next.js via AuthKit helpers and standard OAuth flows.