WorkOS

WorkOS is a developer-first identity and authentication platform purpose-built for B2B SaaS companies that need to become "enterprise ready" quickly. Its core thesis is to abstract away the messy, standards-heavy work of enterprise auth, SAML/OIDC Single Sign-On, SCIM Directory Sync, audit logs, and admin provisioning, behind clean, modern APIs and SDKs. Its flagship AuthKit product adds a full hosted user-management/auth layer (email-password, social login, passkeys, MFA, magic auth) that competes directly with Auth0, Clerk, Firebase Auth and Stytch, while the enterprise modules (SSO, Directory Sync, Audit Logs, Admin Portal) remain its differentiator. The target buyer is a startup or scale-up engineering team selling into enterprise that wants to land big logos without building a SAML stack in-house. Notable customers include Vercel, OpenAI, Cursor, Perplexity and Plaid.

Where WorkOS wins is developer experience and go-to-market alignment: documentation is widely praised, the SDK coverage is broad, support is responsive (dedicated Slack), and AuthKit's first 1M monthly active users are free, a genuinely aggressive offer that undercuts Auth0 and Clerk at the entry point and makes WorkOS attractive for new builds. The Admin Portal is a real differentiator, giving customers' IT admins a self-serve UI to configure their own SSO/SCIM connections, which removes a large support burden from the SaaS vendor. Reliability is backed by a contractual 99.99% uptime SLA on SSO, Directory Sync and Audit Logs.

Where it loses is pricing structure and feature maturity. The per-connection model, $125/month per SSO connection and per Directory Sync connection, is the single most-cited complaint: costs scale linearly with the number of enterprise customers rather than with revenue or usage, and a single SSO customer can cost more than a SaaS vendor's own lowest plan. Critics (notably a detailed Compile7 teardown) also describe "paper cuts": surrounding features, SDKs and docs that lack the depth of more mature competitors, occasionally forcing unexpected debugging and support tickets. Third-party monitors have logged a non-trivial incident count over the years. Net: WorkOS is an excellent, well-documented choice for B2B SaaS teams that need enterprise SSO/SCIM fast and have ACVs high enough to absorb per-connection pricing, and a poor fit for low-ACV, self-serve products where the per-connection economics break down.