{"slug":"workos","name":"WorkOS","category":"auth_identity","node_count":667,"capabilities":[{"term_id":"015ae51d-61c1-4d81-bb11-5b36912660d5","label":"User invitations","domain":"tenancy","doc_node_id":"workos/docs/authkit/invitations"},{"term_id":"0612c41e-579f-4af3-984c-cbfa0f842c12","label":"Fine-grained authorization (FGA)","domain":"authorization","doc_node_id":"workos/docs/fga"},{"term_id":"08b64b44-04c8-4895-8d73-30558c7eeaa3","label":"Password policy controls (strength, breach detection, reuse history)","domain":"authentication","doc_node_id":"workos/docs/authkit/email-password"},{"term_id":"0afcb91d-a2dc-4b08-ae0e-54a5082b87a9","label":"Invite-only signup (closed registration)","domain":"authentication","doc_node_id":"workos/docs/authkit/invitations"},{"term_id":"0b7f5439-bd40-4063-b476-b823327b4a99","label":"SSO attribute mapping","domain":"authentication","doc_node_id":"workos/docs/sso/attributes/custom-attributes"},{"term_id":"13791c2b-88fe-4a2c-b6ba-f91db53766f1","label":"Passwords","domain":"authentication","doc_node_id":"workos/docs/authkit/email-password"},{"term_id":"14ee1cbd-8f9c-49f6-925c-55b84ad40034","label":"Single Sign-On (SSO)","domain":"authentication","doc_node_id":"workos/docs/sso"},{"term_id":"154d361a-7523-4cff-9cce-22f75e7fe885","label":"Cross App Access (XAA)","domain":"authentication","doc_node_id":"workos/docs/authkit/mcp"},{"term_id":"155aa43c-1bbe-45ce-85f3-1fd90bb53016","label":"Custom domains","domain":"branding","doc_node_id":"workos/docs/custom-domains"},{"term_id":"178f14dd-04e6-4b8c-a17d-810b14d2f876","label":"Organizations","domain":"tenancy","doc_node_id":"workos/docs/authkit/users-organizations/organizations"},{"term_id":"2db8b850-f833-43de-922a-02715af18626","label":"MCP server authorization","domain":"authentication","doc_node_id":"workos/docs/authkit/mcp"},{"term_id":"2e5dd04f-23de-4c12-b464-166a9fb3b195","label":"Multi-source directory/HRIS connector coverage","domain":"provisioning","doc_node_id":"workos/docs/directory-sync/attributes/standard-attributes"},{"term_id":"2eec2cb6-240b-4f08-a482-27b843476955","label":"SSO just-in-time (JIT) provisioning","domain":"provisioning","doc_node_id":"workos/docs/sso/jit-provisioning"},{"term_id":"30de7aba-0106-4486-93ad-2a0e9633828c","label":"Passkeys","domain":"authentication","doc_node_id":"workos/docs/authkit/passkeys"},{"term_id":"33684382-701f-4b93-b682-a9b52def5070","label":"Multi-factor authentication","domain":"auth","doc_node_id":"workos/docs/authkit/mfa"},{"term_id":"36499522-b230-4610-8807-fe9770c9a665","label":"Impossible travel detection","domain":"security","doc_node_id":"workos/docs/authkit/radar"},{"term_id":"3f0e4594-5429-484e-ad3d-eac6f3c81224","label":"Embeddable widgets","domain":"developer-experience","doc_node_id":"workos/docs/widgets"},{"term_id":"3f699f21-5302-4a14-ba33-7bb750018fef","label":"Domain verification","domain":"identity-verification","doc_node_id":"workos/docs/domain-verification"},{"term_id":"41b6025e-6577-4e94-96c3-be391d96a9e4","label":"Custom token claims (JWT templates)","domain":"developer-experience","doc_node_id":"workos/docs/authkit/jwt-templates"},{"term_id":"46565cd5-d102-4eca-a72e-be3ede92e353","label":"Envelope encryption (HSM-backed data keys)","domain":"security","doc_node_id":"workos/docs/vault/key-context"},{"term_id":"46a5ed80-9d98-463c-848d-2c2631684321","label":"Bring Your Own Key (customer-managed encryption keys)","domain":"security","doc_node_id":"workos/docs/vault/byok"},{"term_id":"4cd206c6-f0ea-4150-8c74-8f4dbff17d5a","label":"Directory Sync (SCIM)","domain":"provisioning","doc_node_id":"workos/docs/directory-sync"},{"term_id":"50d8dcc5-3375-4153-b61c-04ce331ce3ab","label":"Audit Logs","domain":"compliance","doc_node_id":"workos/docs/audit-logs"},{"term_id":"59101b9b-0919-4e8e-ab18-0a1f897b7a5b","label":"Pipes","domain":"integration","doc_node_id":"workos/docs/pipes"},{"term_id":"5d114e8e-2f92-43ed-a616-784e64144780","label":"Identity linking (account deduplication)","domain":"authentication","doc_node_id":"workos/docs/authkit/identity-linking"},{"term_id":"6186bb2f-d936-45ca-ac29-5741e5924652","label":"Feature flags","domain":"release-management","doc_node_id":"workos/docs/feature-flags"},{"term_id":"7f1c92ac-7654-4506-8508-ceb2c3d0bbb9","label":"Session management","domain":"session-management","doc_node_id":"workos/docs/authkit/sessions"},{"term_id":"8d3ff2c9-97b4-4358-92b0-890c042e597a","label":"AuthKit hosted authentication","domain":"authentication","doc_node_id":"workos/docs/authkit"},{"term_id":"8e6a3194-70f9-46cf-8e3c-98d3c0f44787","label":"AI agent authentication","domain":"authentication","doc_node_id":"workos/docs/authkit/agent-auth"},{"term_id":"92d8c090-c080-4095-af86-07d897d7423a","label":"SP-initiated SSO","domain":"authentication","doc_node_id":"workos/docs/sso/login-flows"},{"term_id":"a6f8ff0b-5328-400e-a62a-645ce27a174f","label":"Role-based access control (RBAC)","domain":"authorization","doc_node_id":"workos/docs/rbac"},{"term_id":"aae6821c-53e2-47f0-b5c7-93aa1e9e5f6b","label":"Machine-to-machine (M2M) authentication","domain":"authentication","doc_node_id":"workos/docs/authkit/connect/m2m"},{"term_id":"af91bee8-23f3-4ae1-946f-0dba51284f98","label":"Bot detection & attack protection","domain":"security","doc_node_id":"workos/docs/authkit/radar"},{"term_id":"b0fa5da9-2d07-49a0-bd29-410f0f7ae4f4","label":"IdP-initiated SSO","domain":"authentication","doc_node_id":"workos/docs/sso/login-flows"},{"term_id":"b80d8f0a-ab2f-4531-b812-581ce670e216","label":"OAuth social login","domain":"authentication","doc_node_id":"workos/docs/authkit/social-login"},{"term_id":"b8b7e6f0-0fee-4fbb-8ea4-b7fbd0404b47","label":"Audit log streaming to SIEM","domain":"compliance","doc_node_id":"workos/docs/audit-logs/log-streams"},{"term_id":"bfc20186-22f6-47f9-9649-f37aedaa9a5e","label":"Events API & webhooks","domain":"integration","doc_node_id":"workos/docs/events"},{"term_id":"c04b66a2-10f9-41c5-9526-9cc544474c4d","label":"API key authentication (issuance & scoping)","domain":"authentication","doc_node_id":"workos/docs/authkit/api-keys"},{"term_id":"c7dbaf2b-ef00-4107-bbc7-50c869661beb","label":"Magic links","domain":"authentication","doc_node_id":"workos/docs/authkit/magic-auth"},{"term_id":"d0e82797-46c4-4050-be06-0619282cd284","label":"Directory attribute mapping","domain":"provisioning","doc_node_id":"workos/docs/directory-sync/attributes/standard-attributes"},{"term_id":"d13218e0-46c9-422c-923a-23c30dd24666","label":"User impersonation","domain":"administration","doc_node_id":"workos/docs/authkit/impersonation"},{"term_id":"e04326b6-a312-4872-a8fd-d7f4a5f9f9ef","label":"Authorization check API","domain":"authorization","doc_node_id":"workos/docs/fga/access-checks"},{"term_id":"e44dcc67-5938-4472-b1e5-806845eb0f9f","label":"Single Logout (SLO)","domain":"authentication","doc_node_id":"workos/docs/sso/single-logout"},{"term_id":"efc2f29a-148e-4fae-9fb1-7e41d72af302","label":"On-premise deployment","domain":"deployment","doc_node_id":"workos/docs/on-prem-deployment"},{"term_id":"f22ff44d-858a-4f46-b86e-b47a72a12b65","label":"Automated deprovisioning of inactive users","domain":"provisioning","doc_node_id":"workos/docs/directory-sync/handle-inactive-users"},{"term_id":"fa70659a-8d69-448c-a44b-e2cac332be6f","label":"Migration tooling from OpenFGA / Oso / SpiceDB","domain":"authorization","doc_node_id":"workos/docs/fga/migration-openfga"},{"term_id":"fbc8cecf-1bbd-4d90-a01b-4cf654f23331","label":"OAuth 2.0 provider (authorization server)","domain":"authentication","doc_node_id":"workos/docs/authkit/connect/oauth"},{"term_id":"fbcedad0-936d-4552-b056-31d5304dcb10","label":"Audit log export (CSV & API)","domain":"compliance","doc_node_id":"workos/docs/audit-logs/exporting-events"},{"term_id":"fdf16247-5d03-47e0-883b-f06832d4248d","label":"Admin Portal","domain":"administration","doc_node_id":"workos/docs/admin-portal"},{"term_id":"fe5d45ad-f3ae-48c5-9c9f-310ac2f1447b","label":"Vault (encryption & secrets)","domain":"security","doc_node_id":"workos/docs/vault"},{"term_id":"ff68a3ad-0263-4878-8e0d-94f6a14b5b02","label":"Organization authentication policies","domain":"tenancy","doc_node_id":"workos/docs/authkit/organization-policies/domain-policy"}]}