Top all-time · #1292
WorkOS Blog
Company blog · workos.com/blog · on HN as grinichwebsecurity
WorkOS Blog is the company blog at workos.com, writing about web and security. Since 2020, 55 different Hacker News readers have linked it 161 times, most often “Show HN: WorkOS – APIs for enterprise features like SSO/SAML”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (28) to say how often HN recommends it.?
Why HN links it
HN readers link WorkOS's blog for posts on SAML and SSO security, SMS MFA, OAuth for AI agents and running DeepSeek locally, often as support for their own points. The WorkOS product is discussed more than the blog.
Summarised by Claude from a sample of 28 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Developer APIs/SDKs for Enterprise Ready features like Single Sign-On, Directory Sync, Audit Logging, and more. Get started for free.
Most-linked posts?
- Show HN: WorkOS – APIs for enterprise features like SSO/SAML9 people · 13 mentions · first linked 2020-03-17
- WorkOS – Building blocks for quickly adding enterprise features to an app7 people · 14 mentions · first linked 2020-03-17
- Practical guide to SAML security vulnerabilities7 people · 9 mentions · first linked 2020-09-02
- Auth.md – Enable agents to register users without the sign-up form4 people · 4 mentions · first linked 2026-05-22
- SAMLStorm: Critical Authentication Bypass in XML-crypto and Node.js libraries3 people · 6 mentions · first linked 2025-03-14
- The Developer’s Guide to SSO3 people · 3 mentions · first linked 2020-07-29
- Dropbox used land-and-expand to move upmarket and close big enterprise customers3 people · 3 mentions · first linked 2020-08-20
- What Makes a Good Changelog3 people · 3 mentions · first linked 2021-08-27
- /docs2 people · 8 mentions · first linked 2020-11-25
- /pricing2 people · 4 mentions · first linked 2023-04-11
What Hacker News says?
I would argue that SMS is horribly insecure and should never be used for authentication. https://workos.com/blog/why-sms-mfa-is-insecure
Comment linking /blog/why-sms-mfa-is-insecure
on “Google will allow only apps from verified developers to be installed on Android”Submitted Show HN: WorkOS – APIs for enterprise features like SSO/SAML as a story · 205 points
HN discussionSmall plug for my startup (hope that's ok!) - if anyone else is looking for an easy way to set up SSO, you should check out the WorkOS Admin Portal feature[0]. It's essentially an onboarding wizard that works for any identity provider. This makes the SAML/OIDC configuration self-serve, which in turn allows you to easily provide SSO to anyone who wants it. The UI can also be branded with your logo/colors and run on y…
Comment linking /admin-portal
on “Tailscale SSH”Submitted Building Webhooks into Your Application: Guidelines and Best Practices (2020) as a story · 115 points
HN discussionwe at workos wrote about it here: https://workos.com/blog/the-developers-guide-to-sso
Comment linking /blog/the-developers-guide-to-sso
on “The Copenhagen Book: general guideline on implementing auth in web applications”Submitted WorkOS – Building blocks for quickly adding enterprise features to an app as a story · 98 points
HN discussionThe answer to this is SCIM, which allows an app to sync the user state with the identity/directory system. IT admins call this "User Lifecycle Management" and it's typically a required feature for enterprise-scale customers. (I work at WorkOS and we help developers with this: https://workos.com/directory-sync )
Comment linking /directory-sync
on “Figure out who's leaving the company: dump, diff, repeat”Submitted How to run DeepSeek R1 locally as a story · 84 points
HN discussionWe're planning to push all configuration to metadata endpoints for providers who support it. There are additional benefits for refreshing SAML certificates (usually every 5 years) and dynamically adapting to other attributes changing. This will get added to our Admin Portal, which is a pre-built experience for IT admins to configure SSO connections: https://workos.com/docs/admin-portal/guide/introduction Unfortunate…
Comment linking /docs/admin-portal/guide/introduction
on “Okta to Acquire Auth0 for $6.5B”Submitted Practical guide to SAML security vulnerabilities as a story · 17 points
HN discussionHad a quick look at your docs for integrating with Azure AD SAML https://workos.com/docs/integrations/azure-ad-saml and wondered why you don't make use of SAML metadata URLs that contain all this configuration? For example the signing certificates, ACS, Reply/ACS URL, EntityIDs are all in the metadata xml docs, so you could boil it down to: * Here's the SP metadata URL - upload it into Azure dashboard here ... * Gra…
Comment linking /docs/integrations/azure-ad-saml
on “Okta to Acquire Auth0 for $6.5B”Submitted SAMLStorm: Critical Authentication Bypass in XML-crypto and Node.js libraries as a story · 10 points
HN discussionWe are doing this at WorkOS. :) It's like Stripe for enterprise features, including SSO/SAML, Directory/SCIM, and more. https://workos.com/docs
Comment linking /docs
on “Okta to Acquire Auth0 for $6.5B”Submitted WorkOS acquires Warrant (YC S21) as a story · 9 points
HN discussionIf anyone's looking for an Auth0 alternative, come check out WorkOS! It's like Stripe for enterprise features, including SSO/SAML, Directory/SCIM, and more. https://workos.com/docs (I'm the founder.) Edit: Here’s our launch last year: https://news.ycombinator.com/item?id=22607402
Comment linking /docs
on “Okta to Acquire Auth0 for $6.5B”Submitted The Developer’s Guide to Audit Logs / SIEM as a story · 9 points
HN discussionCome try WorkOS! http://workos.com/
Comment linking /
on “Okta to Acquire Auth0 for $6.5B”Submitted SAML's signature problem: It's not you, it's XML as a story · 8 points
HN discussionWorkOS ( https://workos.com/ ) if you need to support single sign-on (SSO) for your app. SSO is free, and they offer other enterprise-focused features, like directory sync and audit trails.
Comment linking /
on “Ask HN: Programs that saved you 100 hours?”Submitted Lessons We Learned Adding Dark Mode to WorkOS as a story · 7 points
HN discussionShameless plug for WorkOS. (I'm the founder. Hope that's still ok on HN!) We're like Stripe for SSO/SAML auth. Docs here: https://workos.com/docs Here's our HN launch: https://news.ycombinator.com/item?id=22607402
Comment linking /docs
on “AWS Cognito is having issues and health dashboards are still green”Submitted WorkOS as a story · 6 points
HN discussion(plugging my startup- hope that’s ok!) we’ve had lots of folks migrate from Cognito to WorkOS. Lots of more features, modern API, and better extensibility. More here: https://workos.com/docs/migrate/aws-cognito
Comment linking /docs/migrate/aws-cognito
on “OAuth from First Principles”Submitted WorkOS raises $80m in Series B financing, acquires Modulz as a story · 6 points
HN discussionWorkOS | Remote (US and Europe) | Full Time | https://workos.com WorkOS provides a single, elegant interface that abstracts dozens of enterprise integrations. This means developers can get up and running faster and can focus on their product instead of debugging legacy protocols and fragmented IT systems. We just announced our Series B: https://news.ycombinator.com/item?id=31582832 To learn more about who we are, ou…
Comment linking /
on “Ask HN: Who is hiring? (August 2022)”Submitted What Makes a Good Changelog as a story · 6 points
HN discussionFor SSO, RBAC, etc, check out https://workos.com I’m the founder :) Happy to help!
Comment linking /
on “Ask HN: What Are You Working On? (June 2025)”Submitted Fun with SAML SSO Vulnerabilities and Footguns as a story · 6 points
HN discussionWorkOS | Remote (US and Europe) | Full Time | https://workos.com WorkOS provides a single, elegant interface that abstracts dozens of enterprise integrations. This means developers can get up and running faster and can focus on their product instead of debugging legacy protocols and fragmented IT systems. We just announced our Series B: https://news.ycombinator.com/item?id=31582832 To learn more about who we are, ou…
Comment linking /
on “Ask HN: Who is hiring? (June 2022)”Submitted UI/UX Best Practices for IdP and SP-Initiated Single Sign-On (SSO) as a story · 6 points
HN discussion
