What is WorkOS?
Enterprise SSO, SCIM and audit logs for B2B apps.
Who is WorkOS best for?
WorkOS is best for B2B SaaS teams that need SSO and SCIM for large customers without building each integration.
B2B apps selling to large companies
SSO and SCIM directory sync come through one API, instead of a separate build for each customer's identity provider.
Startups adding login
AuthKit covers sign-up, social login, email codes, passkeys and MFA free for up to 1 million monthly active users.
Self-serve customer onboarding
Admin Portal lets a customer's IT admin connect their own identity provider or directory without a support call.
Auth for AI agents and MCP servers
Separate products handle sign-in for MCP servers and user registration for AI agents on the same platform.
How much does WorkOS cost?
WorkOS is free for user management up to 1 million monthly active users, while its enterprise features are paid by use: Single Sign-On and Directory Sync cost $125 per connection per month for the first 15 connections.
- Sign-up and login with social auth, MFA and role-based access
- $2,500 a month for each extra 1 million users
- Passkeys, email codes and email verification included
- SAML and OIDC with any identity provider
- Each enterprise customer is one connection, whatever its user count
- $100 each from 16 connections, $80 from 31 and $65 from 51
- User provisioning, de-provisioning and role mapping
- Billed per connection, not per end user
- $100 each from 16 connections, $80 from 31 and $65 from 51
- Streams your app's compliance events to a customer's SIEM
- Event retention at $99 a month per million events stored
Radar bot and fraud checks are free for the first 1,000, then $100 a month per 50,000 checks, and a custom domain for AuthKit, Admin Portal and email costs $99 a month. Every product is free to try in the staging environment, and no card is needed until you go to production. Annual credit plans with pre-pay discounts, a 99.99% uptime SLA and guided migration are sold through sales, as are the Scale and Enterprise support plans. More than 100 SSO or directory connections are priced on request. Full pricing on workos.com. We checked these prices on .
How do readers rate WorkOS?
No one has rated WorkOS yet. Be the first.
Sign in to rate. One rating per account.
What are the best WorkOS alternatives?
Three tools on Recaply do WorkOS's job. All three are open source, so you can run them on your own server.
KeycloakOpen SourceChoose it when you want single sign-on, SAML and OpenID Connect on your own infrastructure, with user data kept in your own database
Better AuthOpen SourceChoose it when you want logins, organisations and SAML SSO in your own code and database, with no per-connection fee
authentikOpen SourceChoose it when you need one self-hosted identity provider for staff apps, with LDAP, RADIUS and remote desktop access as well as SAML and OIDC
Questions about WorkOS
What is WorkOS?
Enterprise SSO, SCIM and audit logs for B2B apps.
Who is WorkOS for?
WorkOS is best for B2B SaaS teams that need SSO and SCIM for large customers without building each integration.
Is WorkOS free?
Partly. WorkOS user management with AuthKit is free for up to 1 million monthly active users, and every product can be tried free in staging. Enterprise SSO and Directory Sync cost $125 per connection per month once they run in production.
How much does WorkOS cost?
WorkOS's paid plans are Single Sign-On at $125 per connection per month, Directory Sync at $125 per connection per month and Audit Logs at $125 per SIEM connection per month.
Is there an open source alternative to WorkOS?
Yes. Keycloak, Better Auth and authentik are open source tools that do the same job, so you can run your own.
What are the best WorkOS alternatives?
The closest alternatives on Recaply are Keycloak, Better Auth and authentik.
Where can I try WorkOS?
On its official website, workos.com.
What counts as a connection in WorkOS?
A connection is one enterprise customer you support with SSO or Directory Sync. WorkOS bills each connection at the same rate, whichever identity provider or directory the customer uses and however many of its users sign in.
OpenObserve
Dash0
Rerun
ClickStack
Apache SkyWalking
SigNoz