Freedom251 › Biometric Authentication Software
WorkOS
What WorkOS is
WorkOS provides APIs and hosted tools that SaaS companies can use to add enterprise features to their applications. Its User Management offering supports SAML and OIDC identity providers, social authentication, and passwordless email codes. Directory Sync supports SCIM provisioning and HRIS integrations for managing user lifecycles. The hosted Admin Portal gives customer IT administrators a place to configure identity providers and directories, with custom branding and a custom domain supported.
Developer resources include REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java. AuthKit offers social authentication, email and password, magic-code sign-in, MFA, email verification, organization authentication policies, JIT provisioning, passkeys, RBAC, and CLI authentication. Integration guides cover services including Okta, Microsoft Entra ID, Google Workspace, BambooHR, Rippling, Salesforce, Slack, and Stripe. WorkOS lists API, iOS, and web platforms. All accounts include email and in-dashboard web support, API status notifications, documentation, and example apps. AuthKit is free for up to 1 million users; SSO and Directory Sync start at $125 a month per connection for the first 15 connections.
Who it suits
WorkOS suits SaaS companies building software for enterprise adoption, especially teams adding identity, provisioning, and administration capabilities. It also fits developers looking for APIs, SDKs, webhooks, and example apps to integrate those features.
What it does well
- User Management supports SAML, OIDC, social authentication, and email codes.
- Directory Sync supports SCIM provisioning and HRIS integrations.
- Hosted Admin Portal supports custom branding and custom domains.
- SDKs are available for seven named programming languages.
- All accounts include support, status notifications, documentation, and example apps.
What to know first
- SSO and Directory Sync are priced per connection.
- Custom Domain costs $99 a month.
- HIPAA business associate agreements are available under enterprise plans.
Limits
AuthKit includes up to 1 million users free; additional 1 million users cost $2,500 a month. SSO and Directory Sync use per-connection pricing, starting at $125 a month per connection for 1–15 connections.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Standard Support | Free · Email support · in-product web support · API status notifications | Free |
| Radar | Free · First 1,000 checks free · $100 per 50,000 checks/month | Free |
| AuthKit | Free · Up to 1 million users · additional 1M users $2,500/mo | Free |
| Scale Support | Contact sales · Private Slack channel · video calls · technical onboarding · response-time SLAs | $1,000 a month |
| Directory Sync | Per connection; 1–15 connections · 16–30: $100/connection · 31–50: $80/connection · 51–100: $65/connection | $125 a month |
| Single Sign-On | Per connection; 1–15 connections · 16–30: $100/connection · 31–50: $80/connection · 51–100: $65/connection | $125 a month |
| Audit Logs | Log streaming per SIEM connection · Event retention $99 per million events stored | $125 a month |
| Custom Domain | Monthly · AuthKit, Admin Portal and email sender domains | $99 a month |
The first 8 of 10 plans, as workos.com lists them, read 15 Oct 2026. The maker's own page has the final word. Every plan
Getting started
- Visit the WorkOS website.
- Choose the relevant offering, such as AuthKit, Directory Sync, or Single Sign-On.
- Use the REST APIs, webhooks, or an SDK for your programming language.
- Configure identity providers and directories through the hosted Admin Portal.
- Use the integration guides for a listed provider or service.
Verdict
Choose WorkOS if your SaaS application needs enterprise identity, directory provisioning, or an administration portal through APIs and hosted tools. Check connection-based pricing for SSO and Directory Sync, and note that HIPAA business associate agreements are offered under enterprise plans.
Questions
Does WorkOS have a free plan?
Yes. Radar, AuthKit, and Audit Logs each list a free plan. AuthKit is free for up to 1 million users.
How much do Single Sign-On and Directory Sync cost?
Each starts at $125 a month per connection for 1–15 connections. Pricing per connection decreases for higher listed connection bands.
Which identity protocols does WorkOS support?
Its SSO protocols include SAML and OIDC.
Which platforms are listed for WorkOS?
The listed platforms are API, iOS, and web.
What integrations are covered by WorkOS guides?
Guides include Okta, Microsoft Entra ID, Google Workspace, BambooHR, Rippling, Salesforce, Slack, and Stripe.
What security and compliance information does WorkOS provide?
WorkOS states that it is SOC 2 Type 2 certified, GDPR and CCPA compliant, and undergoes annual third-party penetration tests and external code audits. It says it can sign business associate agreements for customers under enterprise plans.
Facts from WorkOS's own pages
- Admin Portal
- The dashboard and Admin Portal provide visual configuration for SSO connections, directories and customer onboarding. · workos.com, 15 Oct 2026
- Audit Logs
- Audit Logs lets applications emit compliance events and stream logs to SIEM destinations. · workos.com, 15 Oct 2026
- Authentication
- Its User Management offering supports SAML and OIDC identity providers, social authentication, and passwordless email codes. · workos.com, 10 Oct 2026
- AuthKit features
- AuthKit includes social auth, email and password, magic-code sign-in, MFA, email verification, organization auth policies, JIT provisioning, passkeys, RBAC, and CLI authentication. · workos.com, 10 Oct 2026
- Authorization
- WorkOS documentation lists role-based and fine-grained authorization with custom roles and permissions. · workos.com, 15 Oct 2026
- Bot protection
- Radar detects and blocks bots, fraud and abuse, with geo blocking and credential-stuffing protection. · workos.com, 15 Oct 2026
- CLI
- The WorkOS CLI installs AuthKit integrations and manages organizations, users, roles, permissions, webhooks, feature flags and other resources. · workos.com, 15 Oct 2026
- Company identity
- Crunchbase lists the legal name as WorkOS, Inc., founded by Michael Grinich in 2019 and based in San Francisco. · crunchbase.com, 15 Oct 2026
- Company size
- LinkedIn lists WorkOS as a privately held software-development company with 51–200 employees. · linkedin.com, 15 Oct 2026
- Developer tools
- WorkOS describes REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java. · workos.com, 10 Oct 2026
- Directory Sync
- Directory Sync imports and synchronizes users and groups from corporate directories and HR systems, including SCIM-based services. · workos.com, 15 Oct 2026
- Documentation depth
- Documentation includes product guides, integration guides, migration material, API objects, webhooks, errors, SDK references, tools and a weekly changelog. · workos.com, 15 Oct 2026
- Funding news
- Dealroom reported a $100 million Series C at a $2 billion valuation, led by Meritech and Sapphire, in March 2026. · dealroom.co, 15 Oct 2026
- HIPAA
- WorkOS says it can sign business associate agreements for customers on enterprise plans. · workos.com, 15 Oct 2026
- Integrations
- The integration catalog includes SAML and SCIM providers, HR systems, OAuth services, React Native Expo, Supabase, Stripe and Segment. · workos.com, 15 Oct 2026
- Limit: bot false positives
- A G2 reviewer reports Radar occasionally flagged legitimate users and required rule adjustments. · g2.com, 15 Oct 2026
- Limit: dashboard complexity
- A G2 reviewer describes the dashboard as potentially overwhelming and another says edge-case troubleshooting may require support. · g2.com, 15 Oct 2026
- Limit: integration effort
- Some G2 reviewers say integrations with existing tools required more custom code than expected. · g2.com, 15 Oct 2026
- Limit: pricing at scale
- G2 reviewers report that per-connection SSO costs can become expensive or rise quickly as connections increase. · g2.com, 15 Oct 2026
- Node requirement
- The current Node SDK requires Node.js 22.11 or newer and installs as @workos-inc/node. · github.com, 15 Oct 2026
- Notable release
- WorkOS announced Android and iOS SDK availability in August 2026. · workos.com, 15 Oct 2026
- Outage history
- Independent outage tracking records multiple 2026 incidents, including API errors, AuthKit failures, webhook delays and email-delivery delays. · pulsapi.com, 15 Oct 2026
- Praise: documentation and support
- G2 reviewers repeatedly praise clear documentation, responsive support and fast SSO or directory-sync implementation. · g2.com, 15 Oct 2026
- Praise: predictable pricing
- G2 reviewers describe pricing as predictable and easier to model than opaque enterprise authentication pricing. · g2.com, 15 Oct 2026
Where WorkOS stands on Freedom251
- Biometric Authentication Software#15 of 45
- Identity and Access Management Software#18 of 45
- Passkey Authentication Software#25 of 55
- Single Sign-On Software#19 of 34
- Authentication Software#18 of 31