WorkOS

What it is

WorkOS provides drop-in enterprise features (SAML SSO, SCIM provisioning, audit logs, AuthKit) so B2B SaaS can sell upmarket quickly.

Enterprise-readiness (SSO/SCIM/audit) as a clean API for B2B SaaS.

When it fits — and when it doesn’t

Known weaknesses

Each one links to the public issue, changelog or docs page it came from, where we have one.

1. 01

   SSO and Directory Sync costs scale linearly with the number of enterprise connections, becoming expensive for large customer bases.

   The pricing model charges a per-connection fee for SSO and Directory Sync, which can accumulate significantly as the number of enterprise customers grows, despite volume discounts.

   Source: workos.com/pricing ↗
2. 02

   Audit Log storage and streaming incur additional per-unit costs beyond the base service.

   While the base Audit Logs service is free, retaining events and streaming them to SIEMs requires paying per million events and per SIEM connection, adding variable costs for compliance.

   Source: workos.com/pricing ↗

What it does well

• Purpose-built for enterprise SSO/SCIM

  SAML and directory sync are the core product, not an add-on

• Fast path to enterprise-ready

  Ship SSO/SCIM in days to close enterprise deals

• Generous AuthKit free tier

  Core auth free to 1M MAU

Pricing

Free tier

YesAuthKit free to 1M MAU; SSO free for first connections

Paid from

$125/connection/mo

Model

Flat rate

Enterprise plan

Yes

Pricing not independently confirmed — check the vendor’s page.