Cloud Platforms Commoditize Identity

The real risk is not that AWS, Microsoft, or Google build a better identity product, it is that they make identity feel free inside a larger cloud bill. For many teams, especially ones already deep in one cloud, bundled identity is good enough if it gets them login, directory sync, and billing on the same vendor contract. That shifts the fight away from pure feature checklists and toward how much time WorkOS saves developers when enterprise customers need polished SSO, SCIM, admin setup, audit logs, and newer add ons like fraud controls and integrations.

• WorkOS sells speed and packaging, not just raw authentication. A developer can drop in hosted login, enterprise SSO, directory sync, admin setup, audit logs, and authorization without stitching together separate systems. That matters when AI and B2B SaaS companies are pushed to become enterprise ready within months, not years.
  1 sacra 2 sacra
• The bundling threat is concrete because the cloud vendors already price identity as part of broader platform economics. Google Identity Platform uses MAU based pricing. Microsoft Entra External ID includes a free MAU tier. AWS Cognito is built to sit next to the rest of AWS identity and app infrastructure. That makes standalone vendors defend premium pricing every renewal.
  3 google 4 microsoft 5 microsoft 6 amazon 7 sacra
• This is a market wide pattern, not just a WorkOS issue. Stytch and Clerk both face the same pressure from Cognito, Firebase Authentication, and Microsoft bundles. The common escape route is to move up the stack into higher value workflow pieces, like self serve enterprise setup, fraud detection, permissions, migration tools, and cross app integrations.
  1 sacra 8 sacra 9 sacra

The category is heading toward two layers. Cloud platforms will keep absorbing basic authentication, while independent vendors win by becoming the fastest path to enterprise readiness across many clouds and many products. WorkOS is already moving in that direction by expanding from SSO into authorization, fraud, token management, and integrations, which gives it more room to sell outcomes instead of commodity login.