Smoother transitions and live validation in AuthKitLive password requirements, clearer error states, and animated transitions that confirm each step. Read more
October 1, 2026Smoother transitions and live validation in AuthKitLive password requirements, clearer error states, and animated transitions that confirm each step.Read more
Feature Flags Custom TargetingTarget feature flags to any resource in your application. Read more
September 8, 2026Feature Flags Custom TargetingTarget feature flags to any resource in your application.Read more
MCP Enterprise-Managed Authorization (EMA)Support IDP managed access to your MCP server Read more
September 4, 2026MCP Enterprise-Managed Authorization (EMA)Support IDP managed access to your MCP serverRead more
Dashboard SCIM LogsView your full SCIM request and response payloads from your identity provider directly in the Dashboard to debug provisioning issues. Read more
September 4, 2026Dashboard SCIM LogsView your full SCIM request and response payloads from your identity provider directly in the Dashboard to debug provisioning issues.Read more
Agent AuthGive your AI agents their own identity: secure, scoped, instantly revocable. Read more
September 2, 2026Agent AuthGive your AI agents their own identity: secure, scoped, instantly revocable.Read more
Expanded Audit Log retention periodsYou can now retain Audit Log events for up to 10 years Read more
September 2, 2026Expanded Audit Log retention periodsYou can now retain Audit Log events for up to 10 yearsRead more
Waitlist API and self-serve setupYou can now enable AuthKit Waitlist from the dashboard and manage entries with the new Waitlist API. Read more
August 28, 2026Waitlist API and self-serve setupYou can now enable AuthKit Waitlist from the dashboard and manage entries with the new Waitlist API.Read more
User GroupsManage user groups in the dashboard: create groups, add and remove members, and assign roles to all users of a group at once. Read more
August 26, 2026User GroupsManage user groups in the dashboard: create groups, add and remove members, and assign roles to all users of a group at once.Read more
OIDC connections get PKCE, Private Key JWT, and self-serve configurationOIDC SSO connections now support PKCE, the userinfo endpoint, pinned token-endpoint auth methods and ID token signing algorithms, all configurable (and rotatable) without resetting the connection. Read more
August 24, 2026OIDC connections get PKCE, Private Key JWT, and self-serve configurationOIDC SSO connections now support PKCE, the userinfo endpoint, pinned token-endpoint auth methods and ID token signing algorithms, all configurable (and rotatable) without resetting the connection.Read more
Cloudflare Email ServiceSend WorkOS emails through your Cloudflare Email Service account. Read more
August 21, 2026Cloudflare Email ServiceSend WorkOS emails through your Cloudflare Email Service account.Read more
Higher quality sign-ups with email deliverability checksAuthKit sign-ups and invitations for email addresses that can't receive mail (like oops@gmail.con) will now be rejected at the point of entry Read more
August 17, 2026Higher quality sign-ups with email deliverability checksAuthKit sign-ups and invitations for email addresses that can't receive mail (like oops@gmail.con) will now be rejected at the point of entryRead more
Android SDKThe WorkOS Android SDK is now available Read more
August 17, 2026Android SDKThe WorkOS Android SDK is now availableRead more
Migrate SCIM Connections with SCIM BridgeMigrate your SCIM connections to WorkOS with a reversible SCIM proxy that enables zero downtime and safe rollbacks. Read more
August 14, 2026Migrate SCIM Connections with SCIM BridgeMigrate your SCIM connections to WorkOS with a reversible SCIM proxy that enables zero downtime and safe rollbacks.Read more
Accepted invitations count as email verificationNew users who accept an invitation within 10 minutes of delivery are now considered verified and are not sent a separate verification email. Read more
August 13, 2026Accepted invitations count as email verificationNew users who accept an invitation within 10 minutes of delivery are now considered verified and are not sent a separate verification email.Read more
RelayCall third-party APIs on behalf of your users without handling their access tokens. Read more
August 6, 2026RelayCall third-party APIs on behalf of your users without handling their access tokens.Read more