Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

WorkOS sso API

Single Sign-On endpoints.

WorkOS sso API is one of 41 APIs that WorkOS publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include sso. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, a GitHub repository, a changelog, and pricing.

This API exposes 5 operations across 5 paths, and defines 6 schemas. It is described by OpenAPI 3.1.1, at version 1.0.

Requests are made against 2 base URLs: https://api.workos.com, https://api.workos-test.com.

5 operations 5 paths 6 schemas 3 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.1
API Version
1.0
Base URL
https://api.workos.com
Authentication
HTTP Bearer, HTTP Bearer
Contact
License
Resource Areas
1

Authentication & Security 2

WorkOS sso API declares 2 security schemes for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearer). It accepts HTTP bearer tokens (JWT) (access_token). By default, every request must be authenticated.

  • bearer — Your WorkOS API key prefixed with sk. Pass it as a Bearer token: Authorization: Bearer skexample123456789.
  • access_token — An SSO access token returned from the Get a Profile and Token endpoint.

Paths & Operations 5

Across 5 paths, the API surfaces 5 operations — 3 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

sso 5

Single Sign-On endpoints.

GET
/sso/authorize
Initiate SSO
SsoController_authorize 13 params → 200302
GET
/sso/logout
Logout Redirect
SsoController_logout 1 param → 200302404
POST
/sso/logout/authorize
Logout Authorize
SsoController_logoutAuthorize body → 200201400404
GET
/sso/profile
Get a User Profile
SsoController_getProfile → 200401404
POST
/sso/token
Get a Profile and Token
SsoController_token 4 params body → 200201400404422

Schemas 6

The contract defines 6 schemas that model the data the API accepts and returns. The most detailed are Profile (15 properties), SsoTokenResponse (5 properties), TokenQueryDto (4 properties), SsoLogoutAuthorizeResponse (2 properties). Each schema is shown below with its type and property counts.

TokenQueryDto
object
4 properties 4 required
SsoLogoutAuthorizeResponse
object
2 properties 2 required
SsoAuthorizeUrlResponse
object
1 property 1 required
SsoTokenResponse
object
5 properties 4 required
Profile
object
15 properties 11 required
SlimRole
object
The primary role assigned to the user.
1 property 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

workos-sso-api-openapi.yml Raw ↑

Other APIs WorkOS publishes across the network.

WorkOS admin-portal API
WorkOS api_keys API
WorkOS application.client-secrets API
WorkOS applications API
WorkOS audit-logs API
WorkOS authorization API
WorkOS connections API
WorkOS directories API
WorkOS directory-groups API
WorkOS directory-users API
WorkOS events API
WorkOS feature-flags API