The May updates for WorkOS include the introduction of MCP Authorization with AuthKit, which enables fine-grained authorization for agentic applications. Additionally, users can now update their email addresses via the Update User API or in the Dashboard, with changes triggering verification and unlinking of OAuth identities that no longer match the updated email. Custom attributes also support mapping from SAML responses during Single Sign-On (SSO), allowing fragmented identity provider configurations to be unified under a consistent schema. Furthermore, WorkOS FGA now supports two special context variables and a new helper function, making it easier to write dynamic, context-aware policies. The Admin Portal has also been improved with clearer guidance for domain verification, setup notifications, and easier debugging.