WorkOS
An infrastructure provider in the enterprise identity and access management (IAM) space that offers SaaS companies capabilities such as single sign-on (SSO), directory synchronization, and audit logging. It serves as the identity authentication infrastructure for numerous B2B software companies.
Core Facts
Timeline (last 90 days)
WorkOS exposes a standardized provisioning interface through the Provisioning API.
At WorkOS's init() event, Rami Banna of Stripe demonstrated a coding agent opening an account for WorkOS and generating credentials through Stripe Projects, then showcased the Provisioning API.
The simultaneous launch of Airlock, Atlas, and Passport shows that WorkOS is moving toward a more complete enterprise infrastructure platform, not content to be just an SSO vendor.
Enterprise-grade infrastructure typically includes capabilities such as identity authentication, permission management, audit logs, directory synchronization, data integration, and key management; companies such as WorkOS, Auth0, Okta, and Stytch compete in this track.
One of WorkOS's core values is encapsulating the complexity of supporting multiple SSO protocols (SAML, OIDC, etc.) into an API that developers can quickly integrate.
WorkOS's official recap did not provide detailed feature lists, APIs, pricing, or technical architecture information for the three products Airlock, Atlas, and Passport.
WorkOS held the init() 2026 conference at the SFJAZZ Center in San Francisco.
At the init() 2026 conference, WorkOS showcased three products—Airlock, Atlas, and Passport—in the form of live previews.
Airlock, Atlas, and Passport are currently in the preview stage and still some distance from production availability, requiring waiting for open trials or official release.
At the WorkOS init() event, Anthony Giuliano demonstrated an AI stylist application called DressCode, whose entire Neon configuration was compressed into a single neon.ts file.
31 more timeline events
All Facts (20)
WorkOS is a technology company focused on providing enterprise-grade identity authentication and user management infrastructure for SaaS applications, with products covering core enterprise IT capabilities such as SSO (Single Sign-On), SCIM directory synchronization, and audit logs.
65%UnverifiedWorkOS exposes a standardized provisioning interface through the Provisioning API.
50%UnverifiedOne of WorkOS's core values is encapsulating the complexity of supporting multiple SSO protocols (SAML, OIDC, etc.) into an API that developers can quickly integrate.
50%UnverifiedWorkOS's official recap did not provide detailed feature lists, APIs, pricing, or technical architecture information for the three products Airlock, Atlas, and Passport.
50%UnverifiedEnterprise-grade infrastructure typically includes capabilities such as identity authentication, permission management, audit logs, directory synchronization, data integration, and key management; companies such as WorkOS, Auth0, Okta, and Stytch compete in this track.
50%UnverifiedThe simultaneous launch of Airlock, Atlas, and Passport shows that WorkOS is moving toward a more complete enterprise infrastructure platform, not content to be just an SSO vendor.
50%UnverifiedThe impersonation capability provided by WorkOS allows platform-side personnel to briefly log in as a certain user to reproduce issues reported by customers; when used, the operator, impersonated user, time, and reason should be recorded, and a short validity period should be set.
50%UnverifiedAirlock inserts policy as a checkpoint between the agent and actual execution, requiring every call to first pass an intent-level review, shifting the security boundary from post-hoc auditing to pre-emptive interception.
50%UnverifiedThe Airlock system includes a component called Pipes, which is responsible for carrying the actual routing channel of agent calls, handling request routing and governance.
50%UnverifiedWorkOS used an email-sending demo to illustrate how policy translates into actual action: an agent's request to send an email is first evaluated by Airlock against preset policies, and the call is only executed when the intent matches the policy; otherwise it is blocked.
50%UnverifiedWorkOS Airlock integrates intent checking, RBAC, approval workflows, and policy testing capabilities into a unified platform, allowing developers to design and test policies before officially enabling them.
50%UnverifiedTyped resources refer to mapping JSON data returned by the WorkOS API to clearly defined Swift structs or enums, rather than scattered dictionaries and optionals.
50%UnverifiedWorkOS shields the complexity of integrating with various enterprise IdPs such as Okta, Azure AD, and Google Workspace through a standardized API.
50%UnverifiedThe typical approach to session refresh is to check whether the token in the sealed cookie is nearing expiration, and if so, call the WorkOS refresh endpoint to obtain a new token, re-seal it, and write it back to the cookie.
50%UnverifiedWorkOS AuthKit provides an out-of-the-box identity authentication solution.
50%UnverifiedThe root cause of logout failures in production typically lies in three settings in the WorkOS console: the logout redirect URL, the allowed callback URLs, and the cookie-related settings.
50%UnverifiedWorkOS Vault provides a local encryption solution that keeps sensitive data within the user's own infrastructure at all times, without needing to hand plaintext to a third-party service for processing.
50%UnverifiedEnvelope Encryption is not an invention of WorkOS, but a mature pattern that has been widely validated in the field of cloud security.
50%UnverifiedAtlas represents WorkOS's strategy of extending from infrastructure toward the application layer.
50%UnverifiedWorkOS founder Michael Grinich appeared as a Maker in the Atlas launch.
50%