WorkOS: Incorrect redirect when IdP-Initiated SSO is blocked
Timeline of updates
- resolved
This incident only affected customers who have IdP-Initiated SSO disabled. From Mar 14th at 3:17pm PT until Mar 15th at 12:23pm PT, users who were blocked from IdP-Initiated SSO were redirected to a WorkOS error page instead of the default redirect_uri provided This issue was introduced during a refactor designed to improve our error experience. IdP-Initiated SSO is disabled for a small subset of our customers, and this issue was not caught as part of our release process. We have since updated the new service to account for this behavior. To prevent similar issues in the future, we’ve made improvements to our testing processes and are also improving our tracking of features that are enabled for a limited set of customers, such as "Disabling IdP-initiated SSO"
From WorkOS’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.
Impact, status and times are the vendor’s own, as last archived. View on status.workos.com (opens in new tab).
Cite this
Status incident (vendor impact label: none) posted by WorkOS, started 2023-03-14 22:00 UTC, resolved after 0 min, 1 update(s).
- Title
- Incorrect redirect when IdP-Initiated SSO is blocked
- Vendor
- WorkOS
- Date
- URL
- https://rewindex.com/company/workos/incidents/9n1z4ylp3k98
WorkOS profileRecent WorkOS incidentsAll outages on March 14, 2023WorkOS in March 2023MarkdownJSON