auth
WorkOS
The modern identity platform for B2B SaaS
Enterprise-ready auth building blocks: AuthKit (user mgmt), SSO (SAML/OIDC), Directory Sync (SCIM), Audit Logs, Magic Auth, M2M, Radar fraud protection.
Pricing
| Tier | Price | Notes |
|---|---|---|
| AuthKit Free | Free | First 1M MAUs free. Unlimited organizations, user management, social OAuth, passwordless. |
| AuthKit Scale | $2500/mo | Per 1M additional MAUs. |
| Enterprise / Annual Credits | Custom | Custom with 99.99% SLA, guided migration, dedicated support. |
Limits
| Tier | Metric | Value | Notes |
|---|---|---|---|
| — | audit log retention | $99 per 1M events | Audit log event retention |
| — | audit log streaming | $125/month per SIEM destination | Log streaming to a SIEM |
| — | custom domain | $99/month | Custom domain |
| — | directory sync per connection | $125/conn/month (same tiers as SSO) | Directory Sync (SCIM) pricing |
| — | radar fraud | $100/month per 50K checks (first 1K free) | Radar fraud protection |
| — | sso per connection | $125/connection/month (1-15), $100 (16-30), $80 (31-50), $65 (51-100), $50 (101-200), custom 201+ | SSO per-connection pricing, volume-discounted |
| authkit-free | mau included | 1000000 users/month | AuthKit free MAU allowance |
| authkit-free | organizations | unlimited | Unlimited orgs on free tier |
| authkit-free | staging environments | free | Staging environments complimentary |
Features
- Audit Logs — Standardized audit log pipeline with streaming to SIEMs (Splunk, Datadog, Sumo Logic). · docs
- AuthKit — Complete drop-in user management UI + hosted auth flows. Built on top of WorkOS. · docs
- Directory Sync — SCIM-based user provisioning/deprovisioning from Okta, Azure AD, Google Workspace, BambooHR, Rippling, etc. · docs
- FGA (WorkOS) — Fine-grained authorization based on Google Zanzibar / OpenFGA. · docs
- Magic Auth — Passwordless email codes + links. Good alternative to password auth for B2B. · docs
- Multi-Factor Auth — TOTP + SMS MFA enrollment and verification APIs. · docs
- Organizations — Multi-tenant B2B primitive. Attach SSO/Directory/Audit to specific customer orgs. · docs
- Passkeys — WebAuthn passkeys as a first-class factor. · docs
- Radar — Fraud protection: device fingerprinting + risk scoring at signup and login. · docs
- Single Sign-On — Plug-and-play SAML 2.0 + OIDC SSO with 30+ identity providers pre-mapped. · docs
- User Management — REST API + webhooks for user CRUD, email verification, sessions, MFA, metadata. · docs
- Vault — Secret storage for tokens + per-tenant credentials.
- Widgets — Embeddable admin portals (SSO setup, directory mapping) that your customers self-serve. · docs
Developer interfaces
| Slug | Name | Kind | Version |
|---|---|---|---|
| webhooks | Webhooks | other | — |
| sdk-go | workos-go | sdk | 4.x |
| sdk-authkit-nextjs | @workos-inc/authkit-nextjs | sdk | 1.x |
| sdk-java | workos-java | sdk | 4.x |
| sdk-node | workos-node | sdk | 9.x |
| sdk-php | workos-php | sdk | 5.x |
| sdk-python | workos-python | sdk | 5.x |
| rest-api | WorkOS REST API | rest | v1 |
| sdk-ruby | workos-ruby | sdk | 5.x |
Compare WorkOS with
ai-api
WorkOS vs Anthropic API
Side-by-side breakdown.
ai-api
WorkOS vs AssemblyAI
Side-by-side breakdown.
ai-api
WorkOS vs Deepgram
Side-by-side breakdown.
ai-api
WorkOS vs ElevenLabs
Side-by-side breakdown.
ai-api
WorkOS vs Google Gemini API
Side-by-side breakdown.
ai-api
WorkOS vs Groq
Side-by-side breakdown.
ai-api
WorkOS vs OpenAI API
Side-by-side breakdown.
ai-api
WorkOS vs Replicate
Side-by-side breakdown.
Staxly is an independent catalog of developer platforms. Outbound links to WorkOS are plain references to their official pages. Pricing is verified at publication time — reconfirm on the vendor site before buying.