WorkOS API
WorkOS API
WorkOS API turns enterprise must-haves (SSO, SAML, SCIM, Audit Logs, Directory Sync) into APIs — letting SaaS support enterprise SAML in hours.
Enterprise features integrate in hours (no SAML complexity needed)
Only solves B2B SaaS enterprise auth piece (doesn't replace Clerk / Auth0 full user mgmt)
Sign up at workos.com and create organization for API key. SSO flow: redirect user to /sso/authorize → callback receives profile.
Uptime · 30-day window
About this API
WorkOS is a B2B SaaS infrastructure company founded 2019, very specifically positioned: "let SaaS support enterprise customer SAML SSO in hours". Background: when B2B SaaS sells to enterprise customers, enterprise IT will demand SAML SSO (employees use company Okta / Azure AD to log into SaaS, not separate accounts). But SAML protocol is complex, every enterprise IdP configures differently, debugging is painful; traditional SaaS teams spend months hitting pitfalls. WorkOS bundles all this into APIs: your SaaS integrates WorkOS SDK, adds 5 lines of code, supports all major IdPs (Okta / Azure AD / Google Workspace / OneLogin). Companion products: SCIM directory sync (customer HR system auto-provisions / deprovisions users), Audit Logs (enterprise compliance), Magic Link, Admin Portal. Free 1M MAU SSO is industry-most-generous. Customers mainly SaaS companies expanding to enterprise market (Vercel, Linear, PlanetScale all use).
What you can build
- 1B2B SaaS adding enterprise SAML SSO support
- 2SCIM directory sync (customer HR system auto-syncs users)
- 3Audit logs required by enterprise customers
- 4Unified auth flow compatible with multiple IdPs
Strengths & limitations
Strengths
- Enterprise features integrate in hours (no SAML complexity needed)
- Free 1M MAU SSO (most generous)
- Focuses on B2B SaaS pain points
- Modern API design + excellent DX
Limitations
- Only solves B2B SaaS enterprise auth piece (doesn't replace Clerk / Auth0 full user mgmt)
- Some features require payment (Audit Logs / Magic Link add-ons)
Example request
curl https://workos.com/<endpoint> \
-H "Authorization: Bearer $API_KEY"
# Some providers use X-Api-Key instead — verify in the docs.Getting started
Sign up at workos.com and create organization for API key. SSO flow: redirect user to /sso/authorize → callback receives profile.
FAQ
Does WorkOS replace Clerk / Auth0?+
No. WorkOS is B2B enhancement (SSO / SCIM / Audit). Basic auth (passwords / social login) still uses Clerk / self-built.
Why free 1M MAU SSO?+
Business model is "addon-paid" (Audit Logs / Magic Link paid). Free basic SSO as customer acquisition.
Technical details
- Auth type
- api_key
- Pricing
- freemium
- Rate limit
- 按 plan
- Protocols
- REST
- SDKs
- javascript, typescript, python, go, java, php, ruby