Michael Grinich
- Founded WorkOS in 2018 after co-founding Nylas
- Built enterprise readiness, SSO and SCIM, into a developer API
Bio
Michael Grinich founded WorkOS in 2018. The idea came from a problem he hit at his previous company, Nylas: a product that developers liked could not close enterprise deals without SAML SSO, directory sync, and audit logging, and building those took quarters that a startup does not have.
Profile built from public company and press records.
Where their work shows up
WorkOS turned "enterprise readiness" from a roadmap epic into an API call. That reframing, SSO and SCIM as infrastructure a B2B product buys rather than builds, now shapes how early-stage SaaS companies approach identity at all. See B2B SaaS enterprise readiness, the WorkOS profile, and the best CIAM for B2B SaaS ranking.
Related on Start with Identity
- ReportPhishing-Resistant MFA Support Matrix 2026
54% of 95 business SaaS apps support passkeys or security keys, but only 13% let admins require them, and 60% of apps with a documented SSO plan charge more for
- CVEFortiCloud SSO SAML bypass on FortiOS, FortiProxy, FortiSwitchManager
A crafted SAML message bypasses FortiCloud SSO (CWE-347). Arctic Wolf saw malicious logins three days after disclosure. CISA added it to KEV on 16 December 2025
- CVEFortinet administrative FortiCloud SSO authentication bypass across accounts
An attacker with their own FortiCloud account and registered device could log in as admin to other customers' Fortinet devices with FortiCloud SSO enabled. CWE-
- CVEFortiWeb FortiCloud SSO SAML bypass
The FortiWeb twin of CVE-2025-59718. A crafted SAML message bypasses FortiCloud SSO on FortiWeb. Same CWE-347 class, same December 2025 window, same 'patch or d
- GlossaryIdentity as a Service (IDaaS)
Identity as a Service (IDaaS) is identity and access management delivered from the cloud as a subscription: the provider runs the directory, single sign-on, MFA
- GlossaryIdentity Federation
A trust relationship between identity providers and service providers that lets users authenticate once at their home IdP and access applications at the other p