[deleted]
Show HN: WorkOS – APIs for enterprise features like SSO/SAML
21–30 of 57 posts
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#22Slightly off-topic complaint: I really wish these features weren't considered "Enterprise" by so many people. Do you have a company that uses third party tools and has employees that leave? Congrats, you're an "enterprise" and need the "enterprise" plan. I dream of the day that these features (SSO, Sync/SCIM, auditing) are considered table stakes. I hope WorkOS takes off and drives that. P.S. RIP Nylus
I wish people would stop using 'OS' when naming things, when it's not an Operating System.
So there used to be a platform that gave you all the things you needed to build an app...
It handled stuff like authentication, user management, provisioning, security, compliance, etc. It had a fantastic developer experience and was beloved by developers and at the same time loved by IT. It allowed developers to focus exclusively on product features, and it seamlessly took care of administrative needs of corporate IT.
It was called Microsoft Windows. :)
But in today's era, everything has moved to the cloud and that's made the situation fragmented. There's over a dozen IdP and even more directory systems and logging systems. There's no source of truth! In order to build an app for enterprise, you have to write all of this boilerplate integration code. And right now every company does it themselves in-house.
The goal for WorkOS is to handle all the complicated undifferentiated complexity that every workplace app needs. It runs "under the hood" and lets you focus on building unique product features. It's a standard set of interfaces and features shared across applications.
That's the role of the operating system and that's why we call it an OS. :)
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#23Since this is enterprise tool, what's your security posture like? Are you compliant/certified with framework's like ISO27001?
We're currently in the middle of our SOC-2 Type 2 observation period and should have that certification in Q2. The company is barely 1 year old and the process of certification can be a bit slow. Other attestations including ISO/IEC 27001, 27017, and 27018 will come later. We also have a lot of internal practices and policy for how we secure WorkOS while still allowing our engineering team to ship code incredibly fas…
Will you be supporting HIPAA/PIPEDA as well? I'm just teeing up all of this work for a healthcare SaaS offering, non-trivial. We're presently deployed as a "per-customer" model as some require enterprise options, others not so much. Would be great to have a tool that fills those gaps simply when/as required.
Looks great, I'll definitely be going through it in more detail after work.
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#24Hi HN! I’m the founder of WorkOS ( https://workos.com ) We provide a developer API for making your app enterprise-ready. You can quickly add features including SSO/SAML, Director Sync (SCIM), Audit Logs, and more. WorkOS is “Plaid for enterprise IT systems.” I learned about these enterprise requirements the hard way. Previously, I founded Nylas where we built an email app called Nylas Mail. We couldn’t monetize that…
Just want to clarify - is this different from Monday.com? I saw a bunch of billboards on 101 advertising Monday as your new Work OS.
lol yeah totally different. someone sent me a pic of those last week
though maybe they should become a customer? ;)
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#25Earlier quoted context omitted.
We're currently in the middle of our SOC-2 Type 2 observation period and should have that certification in Q2. The company is barely 1 year old and the process of certification can be a bit slow. Other attestations including ISO/IEC 27001, 27017, and 27018 will come later. We also have a lot of internal practices and policy for how we secure WorkOS while still allowing our engineering team to ship code incredibly fas…
Will you be supporting HIPAA/PIPEDA as well? I'm just teeing up all of this work for a healthcare SaaS offering, non-trivial. We're presently deployed as a "per-customer" model as some require enterprise options, others not so much. Would be great to have a tool that fills those gaps simply when/as required. Looks great, I'll definitely be going through it in more detail after work.
Yep - everything in WorkOS already pipes into our Audit Log so it's quite close.
Would love to learn more about your app. Send me a note and we can chat? mg@workos.com
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#26Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#27Earlier quoted context omitted.
What did you use to build your documentation site?
Very impressed with how the documentation looks. Similar to ReadMe.io, but a little bit more simple. Would love to know as well!
(Answered in the parent comment.)
The hardest part of these docs was actually just writing the docs. So hard to come up with simple language for super complicated topics. And so much more still to do!
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#28It looks like RBAC isn't out yet, any timeline on that? This seems like a very useful product!
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#29It looks like RBAC isn't out yet, any timeline on that? This seems like a very useful product!
Hopefully a beta in a few months. It will integrate closely with the Directory/SCIM services so we want to get that part right first.
Re: Show HN: WorkOS – APIs for enterprise features like SSO/SAML
#30How does this compare / contrast to Auth0?
Similar and different in some ways. Our SSO is free, which makes it a lot more accessible to startups and companies just beginning to go up-market. We also provide a more generic abstraction than Auth0. They essentially "take over" your auth screens and show Auth0 UI. If you use WorkOS, it's not visible to your end-users and you can customize the sign-in experience how ever you want.
You can do this with the Auth0 APIs as well, no? By hitting the `/authorize` endpoint for saml-typed Auth0 connections? In that case Auth0 then acts as a SAML-to-OpenID Connect translation layer.