WorkOS
An auth service covering the part nobody wants to build: SAML SSO, SCIM directory provisioning, audit logs, and the hosted portal where your customer's admin connects their own identity provider. You call an API, you send a link, they wire up Okta or Entra ID without opening a ticket with you.
Strengths
- SAML SSO and SCIM provisioning arrive done, where building them takes months of senior engineering.
- The hosted admin portal lets the customer connect themselves: you drop out of the integration support loop.
- The free tier up to 1 million monthly active users removes the fear of a surprise bill on consumer growth.
Limitations
- Your users' identity lives at a vendor, and it is the most painful brick to bring back in house later.
- Per-connection enterprise pricing is negotiated: you cannot read your future cost off a public grid.
- Oversized for a product with no enterprise customer: you add an external dependency for a feature nobody asked for.
Best for
- A B2B product that just got its first SSO requirement in an RFP.
- A team selling to large accounts that has to provide audit logs without writing them.
- A vendor onboarding several customers on different identity providers who refuses to make a project out of each one.