skills.rest
robotijn
robotijnCOMMUNITY
Explore all skills by this author →
GitHub

workos-sso

Implement WorkOS SSO with SAML/OIDC and SCIM directory sync.

3|2|Updated Jan 23, 2026
Search Tags:#sso#oidc#saml#scim#workos#directory sync#b2b authentication
One-click install
npx skills add https://github.com/robotijn/ctoc --skill workos-sso
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: workos-sso
Source: https://github.com/robotijn/ctoc/tree/main/skills/saas/workos-sso
Command: npx skills add https://github.com/robotijn/ctoc --skill workos-sso

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill eliminates the complexity and security risks of building custom B2B authentication for SaaS products, ensuring enterprise customers can sign in with their corporate credentials while meeting strict compliance requirements for access control and audit logging.

Core Features & Use Cases

  • Enterprise SSO Integration: Natively supports SAML and OIDC for all major identity providers including Okta, Azure AD, Google Workspace, and OneLogin.
  • Automated Directory Sync: Handles user provisioning, deprovisioning, and group management via SCIM webhooks with built-in idempotency to prevent duplicate entries.
  • Compliance-Ready Audit Logging: Tracks all authentication and access events to satisfy SOC2, ISO 27001, and other enterprise security audit requirements. Use case: A B2B SaaS platform can let enterprise customers log in with their corporate IdP, automatically sync user access when employees join or leave the customer's organization, and provide admins with a full audit log of all access changes.

Quick Start

Use the workos-sso skill to implement secure SAML/OIDC SSO and automated SCIM directory sync for your B2B SaaS application using WorkOS.

Frequently Asked Questions about workos-sso

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement SAML SSO and directory sync for a B2B SaaS application?▼

You can implement SAML SSO and directory sync for B2B SaaS by using WorkOS to integrate with enterprise identity providers. This handles secure authentication, SCIM user provisioning, and deprovisioning automatically.

Does WorkOS support both SAML and OIDC protocols for enterprise authentication?▼

Yes, WorkOS supports both SAML and OIDC protocols for enterprise authentication. It natively integrates with major identity providers including Okta, Azure AD, Google Workspace, and OneLogin.

How does SCIM directory sync handle user deprovisioning and prevent duplicate entries?▼

SCIM directory sync handles user deprovisioning via webhooks to immediately revoke sessions when employees leave. Built-in idempotency ensures event processing prevents duplicate directory entries.

Can I use WorkOS SSO to generate compliance audit logs for SOC2 and ISO 27001?▼

Yes, you can use WorkOS SSO to generate compliance audit logs for SOC2 and ISO 27001. It tracks all authentication and access events to satisfy enterprise security audit requirements.

What security measures are enforced for SAML assertions and organization data isolation?▼

Security measures include domain verification, signed SAML assertion validation, and webhook signature checks. It also enforces organization-scoped data isolation to secure B2B access control.

Related Skills

Explore More Software Engineering Skills→
Verridian-aiVerridian-ai
1

WorkOS Manager

Manage WorkOS authentication, OAuth, SSO, SCIM, and domain verification via API.

Community
Advanced
webrix-aiwebrix-ai
1

compliance-evidence-collector

Collect compliance evidence from AWS, Google Drive, and Jira for audits.

Official
Advanced
alissonmds00alissonmds00

clerk-orgs

Implement multi-tenant organization management and role-based access control with Clerk SDKs.

Community
Advanced
modu-aimodu-ai
1.2k

moai-platform-auth0

Implement Auth0-based SSO, SAML, and OIDC with multi-tenant authorization workflows.

Official
Advanced