WorkOS

According to François Dufour, Twilio was one of the first companies that popularized the technical BDR function. Their goal wasn't to qualify the prospect but to help the user get unstuck and provide specific information developers were looking for. Since then, the technical BDR role has taken various titles like "product advocates" that Vercel uses to help developers build and deploy apps faster. Full episode: https://lnkd.in/eGjYJTTh

Last month, a vulnerability was disclosed in the Ruby-SAML and OmniAuth-SAML libraries allowing complete authentication bypass (undiscovered for a decade 🤯). It stemmed from an overly permissive query path supplied to Ruby's standard library implementation of Xpath's first method. In this post, we break down: - How the flaw works  - Vulnerable versions of popular software, including GitLab - How to ensure you've mitigated the issue - Proof of concept attacks  - Ramifications for the open-source community https://lnkd.in/eq6FDU2J

Securely signing out a user is a two-step process: 1. Deleting the session cookie 🍪 provides the user the experience of being logged out. 2. The session must be invalidated ❎ in the backend to prevent any malicious use during the active session window. You can do this easily in AuthKit using the `getLogoutURLFromSessionCookie` function.

One more week until the Enterprise Ready Conference 🌉 Here's a preview of the incredible work our design team has done to transform the venue, including a pop-up cafe where you'll be able to enjoy fresh lattes and cortados. ☕ https://lnkd.in/etHF-Qyi

WorkOS SSO now supports identity provider role assignment. You can easily map group memberships to roles in the Dashboard under the SSO connection settings. https://lnkd.in/db-QFcyD

Secure AuthKit for every preview deploy. Whether previewing a `staging` branch, or every commit, integrations are easy with AuthKit Redirect Wildcards. Here's how 👇

The full speaker lineup for the Enterprise Ready Conference is live, featuring B2B leaders with experience building enterprise features like advanced identity management, encryption, FGA, and logging. Make sure to sign up for an invite: https://lnkd.in/eqAtjbaU

For Sanity, effective marketing means creating specific, technical learning materials that help developers build real things. Magnus Kongsli Hillestad explains, "Developers are picky, but they are more commercial than people give them credit for. They like being marketed to — just not bad marketing." Full episode: https://lnkd.in/gVvR9Z-2

One way to make a blazingly-fast user experience is data collocation. This involves syncing frequently accessed user data directly into your application's database. Here's a tutorial that shows you how to initiate and receive your first AuthKit webhook using Convex 🤝

Announcing our fourth speaker for the Enterprise Ready Conference 🏙️ Javier Soltero, former SVP & GM at Canva, who also brings years of experience scaling products like Google Workspace and Microsoft Outlook to serve billions of users. Request an invite: https://lnkd.in/etHF-Qyi