WorkOS

WorkOS packages the features enterprise buyers demand into drop-in APIs: SAML/OIDC single sign-on, SCIM directory sync, admin portals, audit logs, RBAC, and fine-grained authorization. Its AuthKit product adds a hosted authentication and user-management front door that competes with Auth0, free up to one million monthly active users, which makes it the rare vendor covering both the CIAM front door and the enterprise back door.

In March 2026 WorkOS raised a $100M Series C led by Meritech and Sapphire at a $2B valuation, bringing total funding to roughly $199M with $30M+ ARR reported. The current push extends into AI agents: WorkOS markets giving agents their own scoped identities rather than borrowed user sessions, issuing short-lived tokens and acting as an OAuth 2.1 authorization server for MCP servers so an agent can only call the tools its permissions map to.

Pricing is modular: AuthKit free to 1M MAU ($2,500/month per additional million), enterprise SSO and directory sync at $125 per connection per month with volume discounts, plus add-ons like Radar abuse detection and Vault encryption. Teams should model connection counts carefully, since SSO cost scales with enterprise customers rather than users.

Sign up at workos.com, create an AuthKit app or configure SSO connections in the dashboard.