Michael Grinich
- Founded WorkOS in 2018 after co-founding Nylas
- Built enterprise readiness, SSO and SCIM, into a developer API
Bio
Michael Grinich founded WorkOS in 2018. The idea came from a problem he hit at his previous company, Nylas: a product that developers liked could not close enterprise deals without SAML SSO, directory sync, and audit logging, and building those took quarters that a startup does not have.
Profile built from public company and press records.
Where their work shows up
WorkOS turned "enterprise readiness" from a roadmap epic into an API call. That reframing, SSO and SCIM as infrastructure a B2B product buys rather than builds, now shapes how early-stage SaaS companies approach identity at all. See B2B SaaS enterprise readiness, the WorkOS profile, and the best CIAM for B2B SaaS ranking.
Related on Start with Identity
- CVEFortiCloud SSO SAML bypass on FortiOS, FortiProxy, FortiSwitchManager
A crafted SAML message bypasses FortiCloud SSO (CWE-347). Arctic Wolf saw malicious logins three days after disclosure. CISA added it to KEV on 16 December 2025
- CVEFortinet follow-on SSO SAML bypass after the 59718 patch
A second FortiCloud SSO SAML bypass that hits devices already patched for CVE-2025-59718 and CVE-2025-59719. Actively exploited. CISA guidance 28 January 2026.
- CVEFortiWeb FortiCloud SSO SAML bypass
The FortiWeb twin of CVE-2025-59718. A crafted SAML message bypasses FortiCloud SSO on FortiWeb. Same CWE-347 class, same December 2025 window, same 'patch or d
- GlossaryIdentity Federation
A trust relationship between identity providers and service providers that lets users authenticate once at their home IdP and access applications at the other p
- GlossaryProvisioning
Creating user accounts and entitlements in target systems. Modern provisioning is automated via SCIM or vendor APIs, triggered by HR system events. Manual provi
- GlossarySAML 2.0
Security Assertion Markup Language. An XML-based protocol for federated authentication, dominant in enterprise SSO. Largely superseded by OIDC for new deploymen