starter.wiki搜索⌘KEN

工具评估

WorkOS 评估：为既有应用补齐企业身份能力

提供企业 SSO、目录同步和组织相关 API，适合已有应用身份体系的 B2B 产品。

访问官网

Editorial verdict

已有用户系统、正在进入企业销售的 SaaS 可优先评估。12

Best for

  • Products keeping an existing authentication system
  • B2B teams adding SAML or OIDC enterprise connections
  • Applications that need SCIM or directory-driven lifecycle data
12

不适合

  • New products seeking a complete managed authentication default
  • Teams that do not yet have a validated enterprise identity requirement
  • Applications that need self-hosted federation infrastructure
12
Main trade-off

能缩短企业集成周期，但会在关键身份能力上增加供应商依赖。123

产品边界

当企业客户明确要求 SSO、SCIM 或目录同步时，它是独立能力层而非全套认证替代品。

This entry covers WorkOS Single Sign-On and Directory Sync as standalone Enterprise Identity APIs; it excludes AuthKit's managed sign-in, session, and user-management replacement path.123

适用范围： B2B SaaS teams with an existing authentication layer and validated enterprise federation or provisioning demand

  • The application needs a new authentication system rather than an enterprise add-on
  • Only one protocol is required and the team can support it directly
  • Customer connection volume changes the unit economics
  • No contracted customer requires federation or provisioning yet

为什么团队会评估 WorkOS Enterprise Identity APIs

  • Focused enterprise APIsSSO and Directory Sync can be adopted without moving the application's existing authentication layer.12
  • Protocol normalizationThe application integrates one API surface across supported enterprise identity providers and directories.12
  • Incremental adoptionTeams can add federation or provisioning only when contracted customers require it.12

价格与计费

Per-production-connection pricing with published volume discounts for SSO and Directory Sync3

Add SSO

Single Sign-On — $125/connection/month for 1–15 connections

Published volume tiers fall to $100, $80, and $65 per connection as connection count increases.3

Add provisioning

Directory Sync — $125/connection/month for 1–15 connections

Directory Sync uses the same published connection tiers as SSO.3

Production boundary
Production connections are billable; staging connections are free.3
Volume tiers
Published per-connection rates decline at 16, 31, and 51 connections.3
价格核对日期 查看官方价格

WorkOS Enterprise Identity APIs 与替代方案

WorkOS AuthKit

Choose when
WorkOS should also own sign-in, sessions, users, and organizations.
Compared with WorkOS Enterprise Identity APIs
The integration becomes a full authentication decision rather than an enterprise add-on.56

Auth0

Choose when
Enterprise connections should live inside a broader CIAM platform.
Compared with WorkOS Enterprise Identity APIs
The team adopts a larger platform and its configuration model.78

Frontegg

Choose when
B2B tenant administration and embedded customer-facing management are also required.
Compared with WorkOS Enterprise Identity APIs
The product boundary is broader than focused federation APIs.910

资源与来源

Official resources

  • WorkOS Single Sign-On
    Open
  • WorkOS Directory Sync
    Open
  • WorkOS pricing
    Open
  • WorkOS security
    Open
  1. 1
    WorkOS Single Sign-On

    WorkOS · Accessed Official

  2. 2
    WorkOS Directory Sync

    WorkOS · Accessed Official

  3. 3
    WorkOS pricing

    WorkOS · Accessed Official

  4. 4
    WorkOS security

    WorkOS · Accessed Official

  5. 5
    AuthKit documentation

    WorkOS · Accessed Official

  6. 6
    WorkOS users and organizations

    WorkOS · Accessed Official

  7. 7
    Auth0 documentation

    Auth0 · Accessed Official

  8. 8
    Auth0 enterprise identity providers

    Auth0 · Accessed Official

  9. 9
    Frontegg documentation

    Frontegg · Accessed Official

  10. 10
    Frontegg SSO overview

    Frontegg · Accessed Official