{"slug": "workos", "name": "WorkOS", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 5, "commenters": 10, "warners": 1, "score": 4.482, "rising": -1.64, "first": "2025-11-20", "latest": "2026-07-16", "why": "Recently I moved to WorkOS for modulus.so. love your product.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 5, "neutral": 4, "compare": 0, "warn": 1}, "spark": [0, 0, 2, 0, 0, 0, 2, 1, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Recently I moved to WorkOS for modulus.so. love your product.", "kind": "", "icon": true, "domain": "workos.com", "github_repo": null, "official_url": "https://workos.com", "pricing": "", "aliases": ["WorkOS"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 775187970, "item_id": 48449248, "url": "https://news.ycombinator.com/item?id=48449248", "by": "paulddraper", "date": "2026-06-08", "version": null, "stance": "recommend", "quote": "Clerk, WorkOS, etc.", "excerpt": "You should really stay away from any \"high level\" AWS product, as there is almost always something much better and more flexible. Use EC2, EBS, S3, Route53 plus EKS, RDS, ElastiCache. But anything else that isn't low-to-mid-level (looking at you Beanstalk), use something better. Clerk, WorkOS, etc.", "context": "", "use_case": "authentication", "switched_from": "", "story": "Amazon Cognito now supports multi-Region replication"}, {"id": 772429040, "item_id": 48276815, "url": "https://news.ycombinator.com/item?id=48276815", "by": "agairola", "date": "2026-05-26", "version": null, "stance": "recommend", "quote": "WorkOS's auth.md: how an agent logs into a service it's never met.", "excerpt": "[who, not what] Let's talk about identity-for/of-agents Two pieces of work came out last week that I think are worth bookmarking for your identity program: - WorkOS's auth.md: how an agent logs into a service it's never met. - Uber's writeup: how they keep the original human, and every agent that touched a request, accountable as it hops across their own internal systems, in production across thousands of agents. The", "context": "", "use_case": "", "switched_from": "", "story": null}, {"id": 771734752, "item_id": 48233422, "url": "https://news.ycombinator.com/item?id=48233422", "by": "adisingh13", "date": "2026-05-22", "version": null, "stance": "recommend", "quote": "i love what workos is doing", "excerpt": "i love what workos is doing and i also spoke at their event already. we think this is complementary - we're not setting out to create a new standard, we're giving better access to what already exists.", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Agent.email \u2013 sign up via curl, claim with a human OTP"}, {"id": 743386960, "item_id": 46461685, "url": "https://news.ycombinator.com/item?id=46461685", "by": "grinich", "date": "2026-01-01", "version": null, "stance": "recommend", "quote": "Docs to migrate from Clerk to WorkOS", "excerpt": "Docs to migrate from Clerk to WorkOS: http://workos.com/docs/migrate/clerk Claude Code can often one-shot it. Feel free to reach out if I can help!", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: How Are You Handling Auth in 2026?"}, {"id": 743380176, "item_id": 46461261, "url": "https://news.ycombinator.com/item?id=46461261", "by": "dasubhajit", "date": "2026-01-01", "version": null, "stance": "recommend", "quote": "Recently I moved to WorkOS for modulus.so. love your product.", "excerpt": "Recently I moved to WorkOS for modulus.so. love your product. MCP auth and feature flags are two feature that got me in. I also like that it's flexible enough for me to write custom logic in auth flow - which a lot of providers tries to abstract.", "context": "", "use_case": "Auth, feature flags", "switched_from": "", "story": "Ask HN: How Are You Handling Auth in 2026?"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 782909857, "item_id": 48931866, "url": "https://news.ycombinator.com/item?id=48931866", "by": "svacko", "date": "2026-07-16", "version": null, "stance": "warn", "quote": "all requests to WorkOS timeout with 504 Gateway Timeout", "excerpt": "It looks it affects many services, e.g. I'm not able to re-auth many of the MCPs in claude code as all requests to WorkOS timeout with 504 Gateway Timeout, as it reports https://status.workos.com/ elevated error rates: > Investigating - We are seeing elevated error rates across our platform. Our team is investigating. We will share an update as soon as possible.", "context": "", "use_case": "", "switched_from": "", "story": "Tell HN: CloudFront VPC Origins is down"}]}], "who": [{"by": "gonxped31", "context": "junior software engineer seeking full-time role", "url": "https://news.ycombinator.com/item?id=47977937", "date": "2026-05-01"}], "tags": [], "use_cases": ["authentication", "enterprise sso", "auth, feature flags", "sso and scim"], "compared": [{"slug": "clerk", "name": "Clerk", "co": 4, "switched_from": 0, "switched_to": 0}, {"slug": "claude-code", "name": "Claude Code", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "supabase", "name": "Supabase", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 770936320, "item_id": 48183520, "url": "https://news.ycombinator.com/item?id=48183520", "by": "gjtorikian", "date": "2026-05-18", "version": null, "stance": "recommend", "quote": "I open sourced our OpenAPI spec to SDK pipeline", "excerpt": "Utterly shameless plug, but recently at WorkOS I open sourced our OpenAPI spec to SDK pipeline: https://workos.com/blog/handwritten-sdks-are-dead We evaluated Stainless & Fern for our 8+ languages but ultimately I couldn\u2019t justify the cost nor ceding control to another organization for something as important as platform DX.", "context": "", "use_case": "", "switched_from": "", "story": "Anthropic Acquires Stainless"}, {"id": 769295760, "item_id": 48080985, "url": "https://news.ycombinator.com/item?id=48080985", "by": "grinich", "date": "2026-05-09", "version": null, "stance": "recommend", "quote": "Custom roles per-org is supported natively with WorkOS.", "excerpt": "Custom roles per-org is supported natively with WorkOS. (I'm the founder.) I think we have the most advanced RBAC system. You can even map roles from custom IdP groups via SCIM. More info here: https://workos.com/guides/user-provisioning-scim", "context": "founder", "use_case": "B2B SSO, SCIM, RBAC", "switched_from": "", "story": "From Supabase to Clerk to Better Auth"}, {"id": 768832304, "item_id": 48052019, "url": "https://news.ycombinator.com/item?id=48052019", "by": "grinich", "date": "2026-05-07", "version": null, "stance": "recommend", "quote": "WorkOS has a built-in workflow for all the complex SAML/SCIM attribute mapping.", "excerpt": "WorkOS has a built-in workflow for all the complex SAML/SCIM attribute mapping. https://workos.com/docs/directory-sync/attributes Also certificate renewal flows: https://workos.com/changelog/certificate-renewal-flow (I'm the founder.)", "context": "founder", "use_case": "Enterprise SSO", "switched_from": "", "story": "From Supabase to Clerk to Better Auth"}], "threads": [{"url": "https://news.ycombinator.com/item?id=46455469", "title": "Ask HN: How Are You Handling Auth in 2026?", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=48038827", "title": "From Supabase to Clerk to Better Auth", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48931876", "title": "HuggingFace is down due to global AWS outage", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48931825", "title": "Tell HN: CloudFront VPC Origins is down", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48446521", "title": "Amazon Cognito now supports multi-Region replication", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48276814", "title": "item 48276814", "mentions": 1}], "sentiment_by_month": {"2025-11": {"neutral": 1}, "2025-12": {}, "2026-01": {"recommend": 2}, "2026-02": {"neutral": 1}, "2026-03": {}, "2026-04": {}, "2026-05": {"neutral": 1, "recommend": 2}, "2026-06": {"recommend": 1}, "2026-07": {"warn": 1, "neutral": 1}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 782912704, "item_id": 48932044, "url": "https://news.ycombinator.com/item?id=48932044", "by": "sierra1011", "date": "2026-07-16", "version": null, "stance": "neutral", "quote": "Worksop also has an outage as a result https://status.workos.com/", "excerpt": "Worksop also has an outage as a result https://status.workos.com/", "context": "", "use_case": "", "switched_from": "", "story": "HuggingFace is down due to global AWS outage"}, {"id": 782909857, "item_id": 48931866, "url": "https://news.ycombinator.com/item?id=48931866", "by": "svacko", "date": "2026-07-16", "version": null, "stance": "warn", "quote": "all requests to WorkOS timeout with 504 Gateway Timeout", "excerpt": "It looks it affects many services, e.g. I'm not able to re-auth many of the MCPs in claude code as all requests to WorkOS timeout with 504 Gateway Timeout, as it reports https://status.workos.com/ elevated error rates: > Investigating - We are seeing elevated error rates across our platform. Our team is investigating. We will share an update as soon as possible.", "context": "", "use_case": "", "switched_from": "", "story": "Tell HN: CloudFront VPC Origins is down"}, {"id": 775187970, "item_id": 48449248, "url": "https://news.ycombinator.com/item?id=48449248", "by": "paulddraper", "date": "2026-06-08", "version": null, "stance": "recommend", "quote": "Clerk, WorkOS, etc.", "excerpt": "You should really stay away from any \"high level\" AWS product, as there is almost always something much better and more flexible. Use EC2, EBS, S3, Route53 plus EKS, RDS, ElastiCache. But anything else that isn't low-to-mid-level (looking at you Beanstalk), use something better. Clerk, WorkOS, etc.", "context": "", "use_case": "authentication", "switched_from": "", "story": "Amazon Cognito now supports multi-Region replication"}, {"id": 772429040, "item_id": 48276815, "url": "https://news.ycombinator.com/item?id=48276815", "by": "agairola", "date": "2026-05-26", "version": null, "stance": "recommend", "quote": "WorkOS's auth.md: how an agent logs into a service it's never met.", "excerpt": "[who, not what] Let's talk about identity-for/of-agents Two pieces of work came out last week that I think are worth bookmarking for your identity program: - WorkOS's auth.md: how an agent logs into a service it's never met. - Uber's writeup: how they keep the original human, and every agent that touched a request, accountable as it hops across their own internal systems, in production across thousands of agents. The", "context": "", "use_case": "", "switched_from": "", "story": null}, {"id": 771734752, "item_id": 48233422, "url": "https://news.ycombinator.com/item?id=48233422", "by": "adisingh13", "date": "2026-05-22", "version": null, "stance": "recommend", "quote": "i love what workos is doing", "excerpt": "i love what workos is doing and i also spoke at their event already. we think this is complementary - we're not setting out to create a new standard, we're giving better access to what already exists.", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Agent.email \u2013 sign up via curl, claim with a human OTP"}, {"id": 767647006, "item_id": 47977937, "url": "https://news.ycombinator.com/item?id=47977937", "by": "gonxped31", "date": "2026-05-01", "version": null, "stance": "neutral", "quote": "implemented full authentication flow with WorkOS", "excerpt": "Location: Canada Remote: Preferred Willing to relocate: Depends on the role. Technologies: * Languages: Python, TypeScript, JavaScript, Java, SQL, R Frontend: React, Next.js, Tailwind CSS, ShadCN, React Query (Tanstack) Backend & Data: FastAPI, Node.js, PostgreSQL, Supabase AI/ML: PyTorch, Scikit-learn, n8n, Docker, CI/CD Portfolio/CV: https://samir-gbian.vercel.app/ GitHub: https://github.com/Gonxped31 LinkedIn: htt", "context": "junior software engineer seeking full-time role", "use_case": "authentication", "switched_from": "", "story": "Ask HN: Who wants to be hired? (May 2026)"}, {"id": 754653905, "item_id": 47165869, "url": "https://news.ycombinator.com/item?id=47165869", "by": "entrustai", "date": "2026-02-26", "version": null, "stance": "neutral", "quote": "Authentication is handled via WorkOS", "excerpt": "Hey HN \u2014 builder here. The problem: Regulated industries (legal, medical, financial) are moving past the \"sandbox\" phase and deploying LLMs into production. But LLMs are probabilistic\u2014the same prompt can produce different output every time. You cannot audit a probability distribution. If your AI gives a different answer to two different customers, your compliance team can\u2019t defend it. What The Pilcrow does: It is a d", "context": "", "use_case": "Enterprise SSO", "switched_from": "", "story": null}, {"id": 743386960, "item_id": 46461685, "url": "https://news.ycombinator.com/item?id=46461685", "by": "grinich", "date": "2026-01-01", "version": null, "stance": "recommend", "quote": "Docs to migrate from Clerk to WorkOS", "excerpt": "Docs to migrate from Clerk to WorkOS: http://workos.com/docs/migrate/clerk Claude Code can often one-shot it. Feel free to reach out if I can help!", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: How Are You Handling Auth in 2026?"}, {"id": 743380176, "item_id": 46461261, "url": "https://news.ycombinator.com/item?id=46461261", "by": "dasubhajit", "date": "2026-01-01", "version": null, "stance": "recommend", "quote": "Recently I moved to WorkOS for modulus.so. love your product.", "excerpt": "Recently I moved to WorkOS for modulus.so. love your product. MCP auth and feature flags are two feature that got me in. I also like that it's flexible enough for me to write custom logic in auth flow - which a lot of providers tries to abstract.", "context": "", "use_case": "Auth, feature flags", "switched_from": "", "story": "Ask HN: How Are You Handling Auth in 2026?"}, {"id": 743350896, "item_id": 46459431, "url": "https://news.ycombinator.com/item?id=46459431", "by": "joshcsimmons", "date": "2026-01-01", "version": null, "stance": "recommend", "quote": "This is awesome - I had heard the name floating around but didn't realize how permissive your free tier was.", "excerpt": "This is awesome - I had heard the name floating around but didn't realize how permissive your free tier was. I'm using Clerk for my new project https://thoughtprint.space/ but might switch it over to WorkOS.", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: How Are You Handling Auth in 2026?"}, {"id": 736004560, "item_id": 46000285, "url": "https://news.ycombinator.com/item?id=46000285", "by": "catlifeonmars", "date": "2025-11-20", "version": null, "stance": "neutral", "quote": "We use WorkOS to support some of our offerings", "excerpt": "We use WorkOS to support some of our offerings but not for our own corporate identity/authentication. I\u2019m not close to the project so I don\u2019t have experience using WorkOS but definitely curious about replacing Okta.", "context": "", "use_case": "", "switched_from": "", "story": "Okta's NextJS-0auth troubles"}, {"id": 734755488, "item_id": 45922218, "url": "https://news.ycombinator.com/item?id=45922218", "by": "grinich", "date": "2025-11-13", "version": null, "stance": "neutral", "quote": "OpenAI uses WorkOS for SSO and SCIM.", "excerpt": "OpenAI uses WorkOS for SSO and SCIM. https://help.openai.com/en/articles/9627404-openai-chatgpt-scim-integration-faq#:~:text=your%20IdP%20provider-,via%20the%20WorkOS,-portal.%20Here%E2%80%99s%20a", "context": "", "use_case": "SSO and SCIM", "switched_from": "", "story": "Kratos - Cloud native Auth0 open-source alternative (self-hosted)"}]}