workos.com

Enroll a TOTP authentication factor, issue a challenge, and verify the one-time code using the WorkOS MFA API

Declare a WorkOS Audit Logs event schema, emit an idempotent audit event, then generate and download a CSV export

Poll the WorkOS Events API with a durable cursor to sync data reliably and replay events missed during downtime

Verify a WorkOS webhook's WorkOS-Signature header with HMAC SHA256 over the raw body and respond so WorkOS does not retry

Verify a WorkOS webhook's WorkOS-Signature header with HMAC SHA256 over the raw body and respond so WorkOS does not retry

Model WorkOS Fine-Grained Authorization with resource types, register resource instances, assign roles, and run permission checks

List WorkOS directories, directory users, and directory groups via Directory Sync with correct pagination and deactivation handling

Create a WorkOS Organization, attach and verify its domains, and use domain matching to route users to the correct SSO connection

Generate a WorkOS Admin Portal setup link so a customer IT admin can self-configure their own Enterprise SSO connection

Invite a user to a WorkOS organization, accept the invitation, and manage their organization membership and RBAC role

Sign a user in passwordlessly with WorkOS Magic Auth by emailing a one-time code and authenticating that code for a session

Validate an AuthKit sealed session cookie on every request and refresh the access token when it expires, without forcing the user to sign in again

Authenticate a user through WorkOS AuthKit hosted sign-in: build the authorization URL, handle the callback, and exchange the code for a sealed session cookie

Consume WorkOS Directory Sync events for user lifecycle management

Add enterprise SSO via WorkOS