Nacho
WorkOS IAM Provider
Developer-first B2B identity platform from the USA designed for SaaS companies adding enterprise features. Flagship products include Enterprise SSO (SAML/OIDC with 20+ IdP integrations), Directory Sync (SCIM from Okta, Entra ID, Workday, Google Workspace), AuthKit (hosted login UI with passkeys and social login), Fine-Grained Authorization (hierarchical RBAC/ReBAC), Radar (bot and fraud protection), and Vault (BYOK encryption). Free up to 1 million MAUs. SaaS-only deployment.
Features
- 🇺🇸US
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for WorkOS’s OpenID Connect protocol compatibility? View WorkOS on the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does WorkOS support Username and Password authentication method?
WorkOS supports Username and Password authentication method. Read more
Does WorkOS support Social Sign-in authentication method?
WorkOS supports Social Sign-in authentication method. Google, Microsoft, GitHub, Apple, GitLab, LinkedIn, Slack, and Xero. Configured per-application in the WorkOS Dashboard. Read more
Does WorkOS support Passkey authentication method?
WorkOS supports Passkey authentication method. FIDO2/WebAuthn passkeys supported as both first and second factor via AuthKit. Passkeys satisfy MFA requirements since they require biometric or device PIN verification. Progressive enrollment prompts password users to register a passkey on next sign-in. Passkeys are bound to the custom domain; only available through AuthKit hosted UI. Read more
Does WorkOS support Email Passwordless authentication method?
WorkOS supports Email Passwordless authentication method. Magic Auth sends a six-digit one-time code to the user's email inbox. Codes expire after 10 minutes. Configurable via WorkOS Dashboard and customizable email templates. Read more
Does WorkOS support Phone Passwordless authentication method?
WorkOS does not support Phone Passwordless authentication method. WorkOS does not support SMS-based passwordless authentication. By design, SMS is excluded because it is a phishable authentication method.
Does WorkOS support Magic Link authentication method?
WorkOS does not support Magic Link authentication method. WorkOS Magic Auth uses a six-digit OTP code sent by email, not a clickable magic link. Clickable link-based authentication is not available.
Does WorkOS support Anonymous / Guest authentication method?
WorkOS does not support Anonymous / Guest authentication method. WorkOS requires authenticated user identity. Anonymous or guest session flows are not a built-in feature.
Does WorkOS support Time-based One-Time Password (TOTP) MFA?
WorkOS supports Time-based One-Time Password (TOTP) MFA. Time-based OTP via any TOTP-compatible authenticator app (Google Authenticator, Authy, etc.). Configurable and resettable via the User Security Widget. Read more
Does WorkOS support HMAC-based One-Time Password (HOTP) MFA?
WorkOS does not support HMAC-based One-Time Password (HOTP) MFA. WorkOS only supports TOTP (time-based OTP). Counter-based HOTP is not available.
Does WorkOS support Universal 2nd Factor (U2F) MFA?
WorkOS supports Universal 2nd Factor (U2F) MFA. Roaming FIDO2 security keys (YubiKey, etc.) supported as a second factor through the WebAuthn/Passkeys implementation. Read more
Does WorkOS support WebAuthn MFA?
WorkOS supports WebAuthn MFA. WebAuthn/Passkeys satisfy both first and second factor requirements. Platform authenticators (Face ID, Touch ID, Windows Hello) and roaming security keys are supported. Read more
Does WorkOS support Email Code MFA?
WorkOS does not support Email Code MFA. Email OTP is available as a first-factor passwordless method (Magic Auth), but not as a standalone MFA second factor.
Does WorkOS support Phone Code MFA?
WorkOS does not support Phone Code MFA. WorkOS explicitly does not offer SMS MFA by design, citing SMS as a phishable authentication method that weakens the authentication chain. Read more
Does WorkOS support Recovery Code MFA?
WorkOS supports Recovery Code MFA. Backup codes generated at MFA enrollment for account recovery when the primary MFA device is unavailable. Read more
Does WorkOS support Push Notification MFA?
WorkOS does not support Push Notification MFA. WorkOS does not have a proprietary push notification MFA app. Passkeys provide a comparable user experience for tap-to-approve flows.
Does WorkOS support Adaptive / Risk-Based MFA MFA?
WorkOS does not support Adaptive / Risk-Based MFA MFA. WorkOS does not offer risk-based or adaptive MFA. Authentication policies are configured statically per application.
Does WorkOS support Cisco Duo MFA?
WorkOS does not support Cisco Duo MFA. No native Cisco Duo MFA integration. WorkOS supports Duo as an Enterprise SSO identity provider (SAML/OIDC), but not as a Duo-specific second-factor provider.
Does WorkOS support Step-Up Authentication MFA?
WorkOS does not support Step-Up Authentication MFA. WorkOS does not have a built-in step-up authentication mechanism. Re-authentication flows would need to be implemented at the application layer.
Does WorkOS support OpenID Connect (OIDC) integration protocol?
WorkOS supports OpenID Connect (OIDC) integration protocol. WorkOS acts as an OIDC provider via WorkOS Connect. Supports authorization code flow with PKCE, token introspection, and standard discovery. Read more
Does WorkOS support SAML 2.0 integration protocol?
WorkOS supports SAML 2.0 integration protocol. WorkOS can act as a SAML 2.0 Identity Provider through WorkOS Connect, in addition to supporting SAML as a Service Provider (Enterprise SSO). Supports both SP-initiated and IdP-initiated flows. Read more
Does WorkOS support WS-Federation integration protocol?
WorkOS does not support WS-Federation integration protocol. WorkOS does not support WS-Federation. Microsoft Entra ID and ADFS are supported via SAML 2.0 and OIDC connections.
Does WorkOS support Machine-to-Machine (M2M) Authentication integration protocol?
WorkOS supports Machine-to-Machine (M2M) Authentication integration protocol. OAuth 2.0 Client Credentials grant for service-to-service authentication. M2M tokens support API authorization for backend services and agentic workflows. Read more
Does WorkOS support OpenID Connect (OIDC) Federation identity federation?
WorkOS supports OpenID Connect (OIDC) Federation identity federation. Per-organization OIDC SSO connections for enterprise customers. Supports Okta, Google, PingIdentity, Generic OIDC, and many others. IT admins can self-configure connections via the Admin Portal. Read more
Does WorkOS support SAML 2.0 Federation identity federation?
WorkOS supports SAML 2.0 Federation identity federation. Per-organization SAML 2.0 SSO connections. Supports Okta, Azure AD, ADFS, Google Workspace, JumpCloud, OneLogin, PingFederate, and 20+ enterprise IdPs. SP-initiated and IdP-initiated flows supported. Admin Portal enables self-service setup. Read more
Does WorkOS support Active Directory / LDAP identity federation?
WorkOS does not support Active Directory / LDAP identity federation. WorkOS does not support native LDAP or Active Directory protocol. On-premises AD is integrated via SCIM provisioning or SAML/OIDC federation, not direct LDAP.
Does WorkOS support Azure Active Directory (Entra ID) identity federation?
WorkOS supports Azure Active Directory (Entra ID) identity federation. Microsoft Entra ID (Azure AD) supported as both an SSO provider (SAML/OIDC federation) and a Directory Sync source via SCIM. Read more
Does WorkOS support Bulk User Import user management?
WorkOS supports Bulk User Import user management. Bulk user creation and import via the User Management API. Migration tooling supports importing users at scale from external systems. Read more
Does WorkOS support Password Hash Import (Multiple Formats) user management?
WorkOS supports Password Hash Import (Multiple Formats) user management. Import users with existing password hashes during migration. Supported algorithms include bcrypt, scrypt, argon2i, argon2id, MD5, SHA-1, and PBKDF2. Read more
Does WorkOS support Bulk User Export user management?
WorkOS supports Bulk User Export user management. Export users via the User Management API with pagination and filtering support. Read more
Does WorkOS support Bulk User Update / Delete user management?
WorkOS partially supports Bulk User Update / Delete user management. Individual user update and delete operations are supported via the API. No dedicated bulk batch endpoint; bulk operations require iterating through the API.
Does WorkOS support Upsert on Import user management?
WorkOS supports Upsert on Import user management. User import API supports upsert semantics for migration scenarios. Read more
Does WorkOS support MFA Enrollment Import user management?
WorkOS does not support MFA Enrollment Import user management. MFA enrollments (TOTP secrets, WebAuthn credentials) cannot be imported. Users must re-enroll MFA after migrating to WorkOS.
Does WorkOS support Inbound SCIM Provisioning user management?
WorkOS supports Inbound SCIM Provisioning user management. Directory Sync: enterprise identity providers (Okta, Microsoft Entra ID, Google Workspace, Workday, JumpCloud, and any SCIM 2.0-compliant directory) push user and group changes to WorkOS via SCIM 2.0. Read more
Does WorkOS support Outbound SCIM Provisioning user management?
WorkOS does not support Outbound SCIM Provisioning user management. WorkOS does not push user changes to downstream third-party applications as a SCIM client. WorkOS delivers directory sync events to your application via webhooks and the Events API.
Does WorkOS support SCIM Groups Provisioning user management?
WorkOS supports SCIM Groups Provisioning user management. Directory Group sync is supported. Group membership changes from enterprise IdPs are delivered via Directory Sync events and available via the Groups API. Read more
Does WorkOS support Just-In-Time (JIT) User Provisioning user management?
WorkOS supports Just-In-Time (JIT) User Provisioning user management. Just-in-time user provisioning creates WorkOS user records on first SSO login without pre-provisioning via Directory Sync. Read more
Does WorkOS support Lazy / Trickle Migration from Legacy Database user management?
WorkOS supports Lazy / Trickle Migration from Legacy Database user management. WorkOS provides migration tooling for gradual user migration from legacy systems, including password hash import and API-driven user creation that avoids forced password resets. Read more
Does WorkOS support Self-Service Profile Management Portal user management?
WorkOS supports Self-Service Profile Management Portal user management. AuthKit provides a built-in User Security Widget for end-user MFA management and account security settings. Profile management available via AuthKit hosted UI. Read more
Does WorkOS support User Account Linking user management?
WorkOS supports User Account Linking user management. Multiple authentication methods (social, enterprise SSO, passkeys) can be linked to a single user account. Read more
Does WorkOS support User Blocking / Banning user management?
WorkOS supports User Blocking / Banning user management. Users can be deactivated via the User Management API to prevent all sign-in. Read more
Does WorkOS support User Metadata user management?
WorkOS supports User Metadata user management. Custom user-editable metadata stored per user via the User Management API. Read more
Does WorkOS support Application Metadata user management?
WorkOS supports Application Metadata user management. Application-managed, non-user-editable metadata on user objects via the API. Read more
Does WorkOS support Metadata Size Limits user management?
WorkOS supports Metadata Size Limits user management. Metadata limits are documented in the WorkOS developer reference. Read more
Does WorkOS support User Search user management?
WorkOS supports User Search user management. Search and filter users by email, organization, and other attributes via the User Management API. Read more
Does WorkOS support Role-Based Access Control (RBAC) user management?
WorkOS supports Role-Based Access Control (RBAC) user management. Role-based access control via the Roles API. Roles can be assigned to users within organizations, and WorkOS FGA extends this with hierarchical resource-scoped permissions. Read more
Does WorkOS support Organizations (Multi-Tenancy B2B) user management?
WorkOS supports Organizations (Multi-Tenancy B2B) user management. Organizations are a first-class B2B multi-tenancy primitive in WorkOS. Each organization can have dedicated SSO connections, Directory Sync, domain verification, member management, and Admin Portal access. Read more
Does WorkOS support Password Strength Policies user management?
WorkOS supports Password Strength Policies user management. Password strength and complexity requirements configurable per application via the WorkOS Dashboard. Read more
Does WorkOS support Username Restrictions user management?
WorkOS supports Username Restrictions user management. Username and email format restrictions configurable per application. Read more
Does WorkOS support Progressive Profiling / Forms user management?
WorkOS partially supports Progressive Profiling / Forms user management. PassKey progressive enrollment prompts users to adopt stronger authentication on subsequent sign-ins. Full progressive profiling forms for collecting arbitrary user attributes are not a built-in feature.
Does WorkOS support Attribute-Based Access Control (ABAC) access control?
WorkOS does not support Attribute-Based Access Control (ABAC) access control. WorkOS does not have a built-in ABAC policy engine. Attribute-based rules can be implemented at the application level using user metadata from WorkOS.
Does WorkOS support Fine-Grained Authorization (FGA / ReBAC) access control?
WorkOS supports Fine-Grained Authorization (FGA / ReBAC) access control. WorkOS FGA extends RBAC with hierarchical, resource-scoped access control. Subjects (users/groups), resources (workspace, project, document), and privileges (roles/permissions) support inheritance down the resource hierarchy, sharing conceptual similarities with Zanzibar-style ReBAC. Read more
Does WorkOS support API Authorization (Scopes / Permissions) access control?
WorkOS supports API Authorization (Scopes / Permissions) access control. OAuth 2.0 scopes and permissions for API access control via WorkOS Connect. M2M Client Credentials flow for backend service authorization. Read more
Does WorkOS support Audit Log Retention security feature?
WorkOS supports Audit Log Retention security feature. Audit Logs product captures authentication and administrative events with configurable retention. Available as a separate paid add-on ($99/month per million events). Read more
Does WorkOS support Audit Log Streaming security feature?
WorkOS supports Audit Log Streaming security feature. Audit Logs can be streamed to external SIEM systems. $125/month per SIEM connection. Read more
Does WorkOS support Security Center (Threat Monitoring Dashboard) security feature?
WorkOS does not support Security Center (Threat Monitoring Dashboard) security feature. WorkOS does not provide a dedicated threat monitoring dashboard. Security analytics are available via Radar reports and the Audit Logs product.
Does WorkOS support Encryption at Rest security feature?
WorkOS supports Encryption at Rest security feature. All data encrypted at rest. WorkOS Vault uses envelope encryption with Data Encryption Keys (DEK) and Key Encryption Keys (KEK). Read more
Does WorkOS support Encryption in Transit security feature?
WorkOS supports Encryption in Transit security feature. All endpoints enforced over TLS. SPF, DKIM, and DMARC configured automatically for email authentication. Read more
Does WorkOS support Customer Managed Keys (BYOK) security feature?
WorkOS supports Customer Managed Keys (BYOK) security feature. WorkOS Vault supports Bring Your Own Key (BYOK). Customers provide encryption keys managed in AWS KMS, Azure Key Vault, or Google Cloud KMS. WorkOS access is scoped and auditable. Read more
Does WorkOS support Bot Detection security feature?
WorkOS supports Bot Detection security feature. WorkOS Radar provides bot, fraud, and abuse detection for authentication flows. First 1,000 checks included free; $100/month per 50,000 additional checks. Read more
Does WorkOS support Brute Force Protection security feature?
WorkOS supports Brute Force Protection security feature. Automatic account lockout and rate limiting on authentication endpoints to prevent brute force attacks. Read more
Does WorkOS support Suspicious IP Throttling security feature?
WorkOS supports Suspicious IP Throttling security feature. WorkOS Radar detects and throttles suspicious sign-in attempts from anomalous IP addresses as part of fraud protection. Read more
Does WorkOS support Credential Guard (Dark Web Monitoring) security feature?
WorkOS does not support Credential Guard (Dark Web Monitoring) security feature. WorkOS does not provide dark web credential monitoring.
Does WorkOS support Device Fingerprinting security feature?
WorkOS does not support Device Fingerprinting security feature. WorkOS does not expose device fingerprinting as a standalone feature. Radar handles bot and fraud detection at the network/request level.
Does WorkOS support Per-Organization Branding multi-tenancy?
WorkOS supports Per-Organization Branding multi-tenancy. Admin Portal supports per-organization branding. AuthKit supports application-level branding customization (logo, colors, domain). Read more
Does WorkOS support Per-Organization MFA Policy multi-tenancy?
WorkOS supports Per-Organization MFA Policy multi-tenancy. MFA enforcement can be configured per organization, requiring enterprise users to complete MFA based on their organization's policy. Read more
Does WorkOS support Hosted / Universal Login Page branding feature?
WorkOS supports Hosted / Universal Login Page branding feature. AuthKit provides a fully hosted and customizable login UI (logo, colors, background image, custom domain). Handles all authentication flows including social login, passkeys, and Enterprise SSO. Read more
Does WorkOS support Embedded / Native Login Components branding feature?
WorkOS partially supports Embedded / Native Login Components branding feature. AuthKit is primarily a hosted-redirect login experience. Embedding components directly in app UIs requires custom implementation using the WorkOS User Management API. Read more
Does WorkOS support White-Label / Full Brand Removal branding feature?
WorkOS supports White-Label / Full Brand Removal branding feature. Custom domain ($99/month) and full branding customization (logo, colors, background) removes WorkOS branding from the AuthKit login experience. Read more
Does WorkOS support Localization / i18n branding feature?
WorkOS partially supports Localization / i18n branding feature. AuthKit UI supports some localization capabilities. Full multi-language i18n support is not prominently documented. Read more
Does WorkOS support Prebuilt UI Components (SDK) branding feature?
WorkOS supports Prebuilt UI Components (SDK) branding feature. AuthKit provides a hosted login UI with ready-to-use components for all authentication flows. Framework-specific integration guides available for Next.js, Remix, Astro, and others. Read more
Does WorkOS support Login / Auth Analytics Dashboard analytics?
WorkOS supports Login / Auth Analytics Dashboard analytics. WorkOS Dashboard provides analytics for authentication events, active users, and SSO/Directory Sync connection activity. Read more
Does WorkOS support SOC 2 Type II Certification compliance?
WorkOS supports SOC 2 Type II Certification compliance. Read more
Does WorkOS support HIPAA Business Associate Agreement (BAA) compliance?
WorkOS supports HIPAA Business Associate Agreement (BAA) compliance. WorkOS can sign Business Associate Agreements (BAAs) for customers under enterprise plans. Read more
Does WorkOS support FedRAMP Authorization compliance?
WorkOS does not support FedRAMP Authorization compliance.
Does WorkOS support GDPR: Data Export (Portability) compliance?
WorkOS supports GDPR: Data Export (Portability) compliance. User data exportable via the User Management API for GDPR portability requests. Read more
Does WorkOS support GDPR: Right to be Forgotten (User Deletion) compliance?
WorkOS supports GDPR: Right to be Forgotten (User Deletion) compliance. Users can be permanently deleted via the User Management API to satisfy GDPR right to erasure. Read more
Does WorkOS support Consent Management compliance?
WorkOS does not support Consent Management compliance. WorkOS does not have a built-in consent management or privacy consent feature. OAuth 2.0 scopes provide basic consent screens for WorkOS Connect applications.
Does WorkOS support Region Deployment compliance?
WorkOS partially supports Region Deployment compliance. WorkOS infrastructure is primarily US-based. Personal data transferred outside the EEA is stored in the US. BYOK Vault allows encryption keys to remain in specific cloud regions (AWS KMS, Azure Key Vault, Google Cloud KMS). Read more
Does WorkOS support Private Cloud Deployment compliance?
WorkOS does not support Private Cloud Deployment compliance. WorkOS is a SaaS-only platform with no self-hosted or on-premises deployment option.
Does WorkOS support SDK Coverage developer integration?
WorkOS supports SDK Coverage developer integration. Official SDKs for Node.js/TypeScript, Python, Ruby, Go, PHP, Java, and .NET. Framework-specific quickstarts for Next.js, Remix, Astro, Express, Laravel, Django, Rails, and more. Read more
Does WorkOS support Management API developer integration?
WorkOS supports Management API developer integration. Comprehensive REST API for managing users, organizations, SSO connections, directory sync, roles, and all WorkOS resources. Read more
Does WorkOS support Authentication API Rate Limits developer integration?
WorkOS supports Authentication API Rate Limits developer integration. WorkOS enforces rate limits on authentication API endpoints with documented limits per endpoint. Read more
Does WorkOS support Actions / Extensibility Pipeline developer integration?
WorkOS supports Actions / Extensibility Pipeline developer integration. Webhooks deliver real-time events for authentication, user lifecycle, directory sync, and SSO changes to external endpoints. Events API provides pull-based event retrieval. Read more
Does WorkOS support TypeScript Support in Extensibility developer integration?
WorkOS does not support TypeScript Support in Extensibility developer integration. WorkOS does not provide a managed serverless runtime for hooks. Webhooks are dispatched to customer-hosted endpoints, which can be implemented in any language.
Does WorkOS support Custom Domain developer integration?
WorkOS supports Custom Domain developer integration. Custom domain for AuthKit login pages and authentication endpoints. Required for passkeys in production. Available as a paid add-on at $99/month. Read more
Does WorkOS support Deploy CLI (Infrastructure as Code) developer integration?
WorkOS does not support Deploy CLI (Infrastructure as Code) developer integration. WorkOS does not provide an official CLI for managing or deploying WorkOS configuration as code.
Does WorkOS support Terraform Provider developer integration?
WorkOS partially supports Terraform Provider developer integration. A community-maintained Terraform provider exists (osodevops/workos) supporting organization, user, SSO, and webhook management. No official WorkOS-published provider. Read more
Does WorkOS support Custom Database Connections developer integration?
WorkOS does not support Custom Database Connections developer integration. WorkOS does not support custom database connections or scripts for delegating authentication to a legacy credential store.
Does WorkOS support Native Webhook Support developer integration?
WorkOS supports Native Webhook Support developer integration. WorkOS pushes real-time events (authentication, directory sync, SSO lifecycle) to configured webhook endpoints with signature verification. Read more
Does WorkOS support Universal Login / Hosted Login Page Customization developer integration?
WorkOS supports Universal Login / Hosted Login Page Customization developer integration. AuthKit hosted login page supports full visual customization: logo, background image, brand colors, and custom CSS via the WorkOS Dashboard. Read more
Does WorkOS support Custom Email Provider (SMTP) developer integration?
WorkOS partially supports Custom Email Provider (SMTP) developer integration. WorkOS sends Magic Auth OTP emails automatically. Custom email templates are supported, but routing through a custom SMTP relay is not natively configurable. Read more
Does WorkOS support Email Templates developer integration?
WorkOS supports Email Templates developer integration. Customizable email templates for Magic Auth OTP, MFA enrollment, and other transactional emails via the WorkOS Dashboard. Read more
Does WorkOS support Custom OIDC Claims / Token Enrichment developer integration?
WorkOS supports Custom OIDC Claims / Token Enrichment developer integration. Custom claims can be added to WorkOS Connect access tokens and ID tokens via token configuration. Read more
Does WorkOS support No-Code Auth Flow Builder / Orchestration feature?
WorkOS does not support No-Code Auth Flow Builder / Orchestration feature. WorkOS does not provide a visual no-code authentication flow builder. Flows are configured via the Dashboard and API.
Does WorkOS support Identity Verification / Document Proofing feature?
WorkOS does not support Identity Verification / Document Proofing feature. WorkOS does not offer document-based identity verification or biometric liveness checks.
Does WorkOS support Decentralized / Verifiable Credentials feature?
WorkOS does not support Decentralized / Verifiable Credentials feature. WorkOS does not support W3C Verifiable Credentials or decentralized identity (DID) standards.
Does WorkOS support Built-in Billing / Subscription Management feature?
WorkOS does not support Built-in Billing / Subscription Management feature. WorkOS does not include built-in billing or subscription management integration.
Does WorkOS support Agentic AI / MCP Server Authentication feature?
WorkOS partially supports Agentic AI / MCP Server Authentication feature. WorkOS Pipes provides app and agent integrations for AI workflows. M2M Client Credentials tokens support service-to-service and agent authentication. Dedicated MCP server authentication features are in early development. Read more
Does WorkOS support Post-Quantum Hybrid TLS Key Exchange post-quantum cryptography feature?
WorkOS partially supports Post-Quantum Hybrid TLS Key Exchange post-quantum cryptography feature. No direct vendor claim of PQC TLS support, but WorkOS's published subprocessor list names Cloudflare, Inc. alongside AWS, and WorkOS's public API (api.workos.com) responds with 'server: cloudflare' and a cf-ray header, confirming Cloudflare fronts WorkOS's API traffic. Cloudflare enabled hybrid PQC key exchange by default for TLS 1.3 in 2023-2024 - infra-inherited, not a WorkOS-specific commitment. Read more
Does WorkOS support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature?
WorkOS does not support Post-Quantum Digital Signature Algorithms post-quantum cryptography feature. No public evidence WorkOS supports ML-DSA, SLH-DSA, or FN-DSA for JWT/SSO token signing.
Does WorkOS support Post-Quantum Token & Data Encryption post-quantum cryptography feature?
WorkOS does not support Post-Quantum Token & Data Encryption post-quantum cryptography feature. No public evidence found that the provider supports ML-KEM or HPKE (RFC 9180) for encrypting JWE tokens, SAML assertions, or user secrets.
Does WorkOS support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature?
WorkOS does not support Post-Quantum Certificate & mTLS Support post-quantum cryptography feature. No public evidence found of post-quantum or hybrid X.509 digital certificate support for mTLS client authentication or federation endpoints.
Does WorkOS support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature?
WorkOS does not support Post-Quantum Stateful Hash Signatures post-quantum cryptography feature. No public evidence found of NIST SP 800-208 stateful hash-based signature scheme support (LMS/HSS, XMSS).
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.