{"id":"INC-workos-jl1y0z69jjqh","kind":"incident","aliases":[],"related":[],"title":"WorkOS: Elevated errors across SSO and AuthKit sign-in","description":"From 20:20 to 20:21 UTC on October 9, 2026 some SSO and AuthKit sign-in requests failed with HTTP 500 errors. The failures hit SSO token exchange and AuthKit authenticate requests. \n\nA database maintenance operation conflicted with live sign-in traffic. The operation self-corrected and service recovered shortly thereafter with no data loss. End users who saw an error could sign in again by retrying. We are updating the maintenance job to avoid live traffic disruption.","summary":"For about one minute on October 9, 2026, some SSO and AuthKit sign-in requests failed with HTTP 500 errors after a database maintenance job conflicted with live traffic. The vendor reports no data loss and says the service recovered and users could retry.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"WorkOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["authkit","incident","security","sso","vendor","workos"],"not_affected_if":["no-workos-usage"],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-10-09T19:30:00+00:00","first_seen_at":"2026-11-08T16:43:26+00:00","triaged_at":"2026-11-08T16:44:23+00:00","updated_at":"2026-11-08T16:44:23+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-08T16:44:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"WorkOS: brief SSO and AuthKit sign-in outage from database maintenance","impact":"low","summary":"For about one minute on October 9, 2026, some SSO and AuthKit sign-in requests failed with HTTP 500 errors after a database maintenance job conflicted with live traffic. The vendor reports no data loss and says the service recovered and users could retry.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["workos","sso","authkit"],"confidence":0.7,"fix_status":"unknown","needs_auth":"no","worst_case":"Sign-in requests fail for about one minute; no data loss reported.","analyst_note":"","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["no-workos-usage"],"who_is_affected":"Applications that sign users in through WorkOS SSO or AuthKit could have seen failed sign-ins during the 20:20 to 20:21 UTC window on October 9, 2026. The source describes an availability incident, not a security flaw, and says no data was lost. The source does not say what the team should check or change.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.00068,"input_tokens":4618,"output_tokens":437,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'20':67C,68C,70C '2026':28B,76C '21':71C '500':40B,88C '9':27B,75C 'across':4A 'authent':98C 'authkit':7A,15B,32B,80C,97C 'avoid':144C 'conflict':47B,104C 'correct':115C 'could':64B,131C 'data':55B,123C 'databas':44B,101C 'disrupt':147C 'elev':2A 'end':125C 'error':3A,41B,89C,130C 'exchang':95C 'fail':37B,85C 'failur':91C 'hit':92C 'http':39B,87C 'inc':11A 'inc-workos-jl1y0z69jjqh':10A 'incid':16B 'jl1y0z69jjqh':13A 'job':46B,142C 'live':49B,106C,145C 'loss':56B,124C 'mainten':45B,102C,141C 'minut':24B 'octob':26B,74C 'one':23B 'oper':103C,112C 'recov':61B,118C 'report':53B 'request':36B,84C,99C 'retri':65B,136C 'saw':128C 'say':58B 'secur':17B 'self':114C 'self-correct':113C 'servic':60B,117C 'short':119C 'sign':9A,34B,82C,108C,132C 'sign-in':8A,33B,81C,107C 'sso':5A,18B,30B,78C,93C 'thereaft':120C 'token':94C 'traffic':50B,110C,146C 'updat':139C 'user':63B,126C 'utc':72C 'vendor':19B,52B 'worko':1A,20B 'workos':12A,14A","nicknames":[],"mitigations":[],"who_affected":"Applications that sign users in through WorkOS SSO or AuthKit could have seen failed sign-ins during the 20:20 to 20:21 UTC window on October 9, 2026. The source describes an availability incident, not a security flaw, and says no data was lost. The source does not say what the team should check or change.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["workos"],"ptokens":["workos"],"labels":["authkit","incident","low","security","sso","vendor","workos"],"campaign_type":null,"search_a":"'across':4A 'authkit':7A 'elev':2A 'error':3A 'inc':11A 'inc-workos-jl1y0z69jjqh':10A 'jl1y0z69jjqh':13A 'sign':9A 'sign-in':8A 'sso':5A 'worko':1A 'workos':12A,14A","search_b":"'2026':28B '500':40B '9':27B 'authkit':15B,32B 'conflict':47B 'could':64B 'data':55B 'databas':44B 'error':41B 'fail':37B 'http':39B 'incid':16B 'job':46B 'live':49B 'loss':56B 'mainten':45B 'minut':24B 'octob':26B 'one':23B 'recov':61B 'report':53B 'request':36B 'retri':65B 'say':58B 'secur':17B 'servic':60B 'sign':34B 'sign-in':33B 'sso':18B,30B 'traffic':50B 'user':63B 'vendor':19B,52B 'worko':20B","search_c":"'20':67C,68C,70C '2026':76C '21':71C '500':88C '9':75C 'authent':98C 'authkit':80C,97C 'avoid':144C 'conflict':104C 'correct':115C 'could':131C 'data':123C 'databas':101C 'disrupt':147C 'end':125C 'error':89C,130C 'exchang':95C 'fail':85C 'failur':91C 'hit':92C 'http':87C 'job':142C 'live':106C,145C 'loss':124C 'mainten':102C,141C 'octob':74C 'oper':103C,112C 'recov':118C 'request':84C,99C 'retri':136C 'saw':128C 'self':114C 'self-correct':113C 'servic':117C 'short':119C 'sign':82C,108C,132C 'sign-in':81C,107C 'sso':78C,93C 'thereaft':120C 'token':94C 'traffic':110C,146C 'updat':139C 'user':126C 'utc':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-10-09T19:30:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"workos:jl1y0z69jjqh","url":"https://stspg.io/yw1cb4fm2k3h","severity":"low","published_at":"2026-10-09T19:30:00+00:00","modified_at":"2026-10-09T22:26:27+00:00","first_seen_at":"2026-11-08T16:43:26+00:00","fetched_at":"2026-11-09T02:23:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}