---
source_url: "https://apibenchmarks.com/auth/workos"
title: "WorkOS: review, pricing & ABI score · APIbenchmarks"
mirrored_at: 2026-08-04T03:39:29.894Z
host: apibenchmarks.com
cited_in_42a: true
mirror_canonical: "https://index.42a.ai/apibenchmarks.com/auth/workos"
---

> **Original source:** https://apibenchmarks.com/auth/workos

Enterprise-readiness APIs (SSO, SCIM Directory Sync, Audit Logs, AuthKit) with a famously generous free tier and clean per-connection pricing for B2B SaaS.

WorkOS is a developer-first identity and authentication platform purpose-built for B2B SaaS companies that need to become "enterprise ready" quickly. Its core thesis is to abstract away the messy, standards-heavy work of enterprise auth, SAML/OIDC Single Sign-On, SCIM Directory Sync, audit logs, and admin provisioning, behind clean, modern APIs and SDKs. Its flagship AuthKit product adds a full hosted user-management/auth layer (email-password, social login, passkeys, MFA, magic auth) that competes directly with Auth0, Clerk, Firebase Auth and Stytch, while the enterprise modules (SSO, Directory Sync, Audit Logs, Admin Portal) remain its differentiator. The target buyer is a startup or scale-up engineering team selling into enterprise that wants to land big logos without building a SAML stack in-house. Notable customers include Vercel, OpenAI, Cursor, Perplexity and Plaid.

Where WorkOS wins is developer experience and go-to-market alignment: documentation is widely praised, the SDK coverage is broad, support is responsive (dedicated Slack), and AuthKit's first 1M monthly active users are free, a genuinely aggressive offer that undercuts Auth0 and Clerk at the entry point and makes WorkOS attractive for new builds. The Admin Portal is a real differentiator, giving customers' IT admins a self-serve UI to configure their own SSO/SCIM connections, which removes a large support burden from the SaaS vendor. Reliability is backed by a contractual 99.99% uptime SLA on SSO, Directory Sync and Audit Logs.

Where it loses is pricing structure and feature maturity. The per-connection model, $125/month per SSO connection and per Directory Sync connection, is the single most-cited complaint: costs scale linearly with the number of enterprise customers rather than with revenue or usage, and a single SSO customer can cost more than a SaaS vendor's own lowest plan. Critics (notably a detailed Compile7 teardown) also describe "paper cuts": surrounding features, SDKs and docs that lack the depth of more mature competitors, occasionally forcing unexpected debugging and support tickets. Third-party monitors have logged a non-trivial incident count over the years. Net: WorkOS is an excellent, well-documented choice for B2B SaaS teams that need enterprise SSO/SCIM fast and have ACVs high enough to absorb per-connection pricing, and a poor fit for low-ACV, self-serve products where the per-connection economics break down.

The APIbenchmarks Index is a weighted sum of four dimensions, each scored on an absolute 0–100 reference scale. See the [methodology](https://apibenchmarks.com/methodology) for every mapping.

Table 1. Derivation of the ABI for WorkOS. Contribution = score × weight; the index is their sum.

Developers praise the documentation, clean APIs and responsive support, but the per-connection SSO/Directory Sync pricing is a recurring and significant complaint.