I'm building for enterprise customers and need SAML, OIDC, and SCIM support. What should I use?

If you need SAML, OIDC, and SCIM for enterprise customers, the best choice is usually to use an identity platform / CIAM provider rather than building it yourself.

Good options

• Auth0 – strong enterprise SSO features, SAML + OIDC, SCIM support via enterprise features/integrations
• Okta Customer Identity / Workflows – strong if your customers already use Okta
• Azure AD B2C / Entra External ID – good if your buyers are Microsoft-heavy
• WorkOS – especially good if you want to add enterprise SSO + SCIM quickly with less implementation work
• OneLogin, Ping, FusionAuth – also worth considering depending on price/control needs

What I’d recommend

• If you want the fastest path to enterprise readiness: WorkOS
• If you want a full-featured identity platform: Auth0
• If your customers are heavily in the Microsoft ecosystem: Microsoft Entra External ID
• If you want more control / self-hosting options: FusionAuth

Key point

Supporting all three protocols yourself is possible, but it’s usually not worth building from scratch unless identity is core to your product. Enterprise SSO and SCIM have lots of edge cases:

• IdP-specific SAML quirks
• OIDC claim mapping
• SCIM provisioning/deprovisioning lifecycle
• Just-in-time provisioning vs. directory sync
• Domain verification and org-initiated login
• Role/group sync

My default recommendation

For most SaaS products selling to enterprise:

1. Use WorkOS for SSO + SCIM
2. Use your app’s normal auth for end users
3. Add OIDC if you need social/login-first auth flows or want a broader login strategy

If you want, I can give you a side-by-side comparison of WorkOS vs Auth0 vs Okta vs Entra vs FusionAuth based on price, implementation effort, and enterprise fit.