September 2023 Summaries

In September, WorkOS introduced several product updates including a 99.99% uptime guarantee for all customers using SSO, Directory Sync, and Audit Logs. Enterprise customers benefit from the contractually guaranteed uptime as specified in the Service Level Agreement (SLA). The Events API allows apps to interface with WorkOS more securely and efficiently. The Audit Logs Retention Period API enables modification of log retention periods for an organization. Customers can extend the period to 365 days via an API call. Lastly, Directory Sync now consolidates group membership fragmentation by handling events like deactivation, suspension, and reactivation with a standardized approach.

The System for Cross-domain Identity Management (SCIM) protocol has been widely adopted to streamline user access across multiple applications and platforms. However, the implementation variability of SCIM creates challenges for developers building applications for enterprises that work with different SCIM providers. WorkOS aims to standardize the process of managing group memberships by addressing inconsistencies and enhancing security. The concept of "groups" is crucial in identity management systems, but varying interpretations and implementations of the SCIM protocol can lead to downstream applications interpreting data from different providers inconsistently or even requiring tailored solutions for specific actions. WorkOS has shifted its strategy to focus on providing a more unified and secure solution by automatically removing users from all associated group memberships when they are deleted or suspended, thereby reducing security risks, billing inaccuracies, management complexity, and compliance concerns.