WorkOS

PlanetScale chose WorkOS because they needed an all-in-one solution for both SSO and SCIM provisioning. They knew that maintaining SSO alone could require "teams of up to seven engineers." With WorkOS, they were able to seamlessly integrate with an existing auth layer and support enterprise features in days instead of months. https://lnkd.in/ey5rAfnf

Introducing Role-Based Access Control (RBAC) for AuthKit. RBAC is crucial for authorization, which defines what the user can do in your app once their identity is verified. With roles and permissions, you can offer your enterprise customers a more precise and flexible way to manage user access.

Part 2 of our RBAC series explains the benefits of supporting Directory Sync (SCIM) with your authorization system. Most authorization solutions require your customer’s admin to generate the data source for roles, resources, and permissions inside your app. With identity provider-based authorization systems via SCIM, the admin can use data that already exists in their IdP. This is important for enterprises that want to manage their users’ roles and permissions from a single source of truth instead of managing hundreds of different SaaS tools and their unique permissions schemes. https://lnkd.in/eJr_eE53

Prefect is a modern workflow orchestration tool that helps ML engineers build, run, and monitor data pipelines efficiently. With a growing enterprise customer base, they needed to quickly implement a solution for SSO and Directory Sync (SCIM). The team had considered Auth0, FusionAuth, and other open source providers, but chose WorkOS for its excellent documentation, well-designed Python library, and ease of implementation. The Admin Portal has been a game changer, saving the team more than 300 onboarding hours for marquee enterprise customers like Capital One, Cisco, and Progressive. https://lnkd.in/eSQX8qYb

Not everyone uses Next.js, but it sure feels like it’s the only JavaScript framework with first-class integrations. AuthKit is built to work with any framework — offering both high-level integrations and low-level SDKs. Here is our latest tutorial that shows you how to integrate AuthKit with any JavaScript framework in 30 minutes or less.

While authentication is a Day 0 necessity, authorization is often a Day 5 problem that isn't prioritized until you start selling to more serious customers. Initially, most apps give all users the same access, but as customer demands grow, implementing either Role-Based Access Control (RBAC) or Fine-Grained Authorization (FGA) becomes essential, with FGA offering more scalable and robust solutions for complex needs. Our latest Developer's Guide offers practical guidance for engineers implementing these systems. https://lnkd.in/dzMKk_cn

🎙 3 key takeaways from Crossing the Enterprise Chasm with Bear Douglas, who leads developer relations at Pinecone. 1) Where DevRel lives in the org chart: If within product teams, DevRel is launching feature previews and ensuring developer feedback is integrated into product development. When positioned within marketing, the focus shifts to driving top-of-funnel growth through community outreach and relationship building. 2) Focus on impact: A key part of hiring for DevRel is understanding what the company needs and how developers will impact the bottom line. This helps determine if DevRel should focus on improving documentation, driving growth, or building a community of advocates, based on where it will add the most value. 3) Education: A big part of DevRel at Pinecone is educating developers on topics like vector databases, data ingestion pipelines, and optimal chunking strategies, and doing this across YouTube videos, screencasts, and detailed tutorials. For more, check out the full episode of Crossing the Enterprise Chasm (link in comments)

SCIM role assignment is now supported in AuthKit. You can map group membership to roles in the Admin Portal during SCIM and Google Workspace directory setup. These mappings can then be used to set the role on the organization membership via Directory Provisioning. https://lnkd.in/eZdHzxnq

WorkOS now supports a generic Log Streams destination using HTTP POST. This allows you to stream Audit Log events directly from your application to any customer's SIEM provider that accepts HTTP POST requests with a JSON payload. https://lnkd.in/edmR38pd

Motive is a comprehensive fleet management platform offering vehicle tracking, driver safety, and spend management solutions. Facing a build vs. buy decision for SSO and SCIM provisioning, they recognized the difficulty in achieving time-to-market and scalability with a homegrown solution. Building these features in-house meant costly delays in securing enterprise customers. By partnering with WorkOS, Motive shipped critical enterprise features immediately, saving time and significant engineering resources. Read more on why hundreds of high-growth startups choose WorkOS in a build vs. buy scenario: https://lnkd.in/gGgzNRVP