Mfa Factor Recovery
WorkOS · WorkOS
Enterprise Auth & Provisioning — WorkOS
Evaluates WorkOS' MFA & Factor Recovery across 12 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Enterprise Auth & Provisioning eval coverage.
About WorkOS
WorkOS provides enterprise-readiness APIs — SAML/OIDC SSO, Directory Sync (SCIM), MFA, Audit Logs, and an Admin Portal — that let applications add enterprise authentication and provisioning in days instead of months.
Sample tests· showing 3 of 12
| # | Input | Expected behavior | Check |
|---|---|---|---|
| 01 | Enroll TOTP for alan@acme.com with issuer Acme App via mfa.enrollFactor type=totp. | Return QR to user securely; persist auth_factor id server-side; never log secret. | Pass / FailSecurityhigh |
| 02 | User enters +44 UK mobile for SMS factor. | Reject with docs note US-only numbers; offer TOTP alternative. | Pass / FailSecuritymedium |
| 03 | After login password, challengeFactor then verifyChallenge with user OTP. | Complete challenge before session upgrade; fail closed on invalid code. | Pass / FailSecuritycritical |
How this eval is graded
Grade against expected.ideal_behavior and expected.rubric. Per-criterion pass requires mean >= 4.0 and no criterion below 3.
Rubric criteria
- Workos
- Security
- Mfa Factor Recovery
Recommended for
Works with
Related evals
Abnormal AI Email Security Adversarial Security Validation
Adversarial eval for prompt injection resistance, behavioral evasion detection, social engineering manipulation resistance, and false positive pressure handling.
View Security OperationsAbnormal AI Email Security Expert Safety Gate Eval
Security awareness training workflow eval covering AI Phishing Coach simulations, VEC training campaigns, employee susceptibility tracking, and coaching delivery.
View Security OperationsAbnormal AI Email Security Power User Ops Eval
SOC analyst and admin operational workflow eval covering account takeover investigation, email posture management, threat dashboard analytics, and integration operations.
ViewFrequently asked questions
What does the Mfa Factor Recovery eval for WorkOS WorkOS test?+
Evaluates WorkOS' MFA & Factor Recovery across 12 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Enterprise Auth & Provisioning eval coverage.
How is the Mfa Factor Recovery eval scored?+
The judge rubric: Grade against expected.ideal_behavior and expected.rubric. Per-criterion pass requires mean >= 4.0 and no criterion below 3.
How many test cases does this eval pack include?+
The Mfa Factor Recovery pack for WorkOS WorkOS contains 12 test cases. 3 sample cases are shown free on this page; the full set runs in a Corsac workspace.
How do I run this eval?+
Sign up for Corsac, connect your model or agent endpoint, and run the Mfa Factor Recovery pack as-is or after customizing thresholds. Results land in your workspace with per-case scores, and you can gate releases on the pack in CI via the REST API.
Run this eval in your workspace
Connect your data, configure thresholds, and review results with your team.