Nacho
Clerk IAM Provider
Developer-first CIAM with best-in-class prebuilt React and Next.js components. Features a generous 50K MRU free tier, built-in Stripe billing integration, and an organization-first B2B data model.
Features
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for Clerk’s OpenID Connect protocol compatibility? View Clerk on the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does Clerk support Username and Password authentication method?
Clerk supports Username and Password authentication method. Read more
Does Clerk support Social Sign-in authentication method?
Clerk supports Social Sign-in authentication method. 20+ OAuth providers. Free plan limited to 3 social connections; Pro and above allow unlimited connections. Read more
Does Clerk support Passkey authentication method?
Clerk supports Passkey authentication method. Available on Pro plan and above. Read more
Does Clerk support Email Passwordless authentication method?
Clerk supports Email Passwordless authentication method. Read more
Does Clerk support Phone Passwordless authentication method?
Clerk supports Phone Passwordless authentication method. Read more
Does Clerk support Magic Link authentication method?
Clerk supports Magic Link authentication method. Read more
Does Clerk support Anonymous / Guest authentication method?
Clerk does not support Anonymous / Guest authentication method. Anonymous/guest authentication is not supported. It is listed on Clerk's product roadmap. Read more
Does Clerk support Time-based One-Time Password (TOTP) MFA?
Clerk supports Time-based One-Time Password (TOTP) MFA. Available on Pro plan and above. Read more
Does Clerk support HMAC-based One-Time Password (HOTP) MFA?
Clerk does not support HMAC-based One-Time Password (HOTP) MFA. Not supported. Clerk favors TOTP and WebAuthn/Passkeys. Read more
Does Clerk support Universal 2nd Factor (U2F) MFA?
Clerk supports Universal 2nd Factor (U2F) MFA. Supported via WebAuthn/Passkey implementation (roaming and platform authenticators). Available on Pro plan and above. Read more
Does Clerk support WebAuthn MFA?
Clerk supports WebAuthn MFA. Hardware security key MFA available on Pro plan and above. Read more
Does Clerk support Email Code MFA?
Clerk does not support Email Code MFA.
Does Clerk support Phone Code MFA?
Clerk supports Phone Code MFA. SMS MFA available on Pro plan and above. Read more
Does Clerk support Recovery Code MFA?
Clerk supports Recovery Code MFA. Backup codes for MFA recovery. Requires MFA to be enabled (Pro plan and above). Read more
Does Clerk support Push Notification MFA?
Clerk does not support Push Notification MFA. Read more
Does Clerk support Adaptive / Risk-Based MFA MFA?
Clerk does not support Adaptive / Risk-Based MFA MFA. Read more
Does Clerk support Cisco Duo MFA?
Clerk does not support Cisco Duo MFA. No native Cisco Duo integration. Duo can be used as a generic TOTP authenticator app but there is no dedicated Duo MFA provider. Read more
Does Clerk support Step-Up Authentication MFA?
Clerk supports Step-Up Authentication MFA. Supported via Clerk's Reverification feature, which requires users to re-verify their identity before performing sensitive actions. Read more
Does Clerk support OpenID Connect (OIDC) integration protocol?
Clerk supports OpenID Connect (OIDC) integration protocol. Clerk as OIDC identity provider. Available on Pro plan and above. Read more
Does Clerk support SAML 2.0 integration protocol?
Clerk supports SAML 2.0 integration protocol. SAML SSO as identity provider and service provider. Available on Pro plan and above. Read more
Does Clerk support WS-Federation integration protocol?
Clerk does not support WS-Federation integration protocol. Read more
Does Clerk support Machine-to-Machine (M2M) Authentication integration protocol?
Clerk supports Machine-to-Machine (M2M) Authentication integration protocol. M2M tokens are generally available (since October 2025). Supports opaque tokens and JWTs for authenticating requests between backend services. Read more
Does Clerk support OpenID Connect (OIDC) Federation identity federation?
Clerk supports OpenID Connect (OIDC) Federation identity federation. OIDC enterprise SSO connections per organization. Available on Pro plan and above. Read more
Does Clerk support SAML 2.0 Federation identity federation?
Clerk supports SAML 2.0 Federation identity federation. SAML enterprise SSO connections per organization. Available on Pro plan and above. Read more
Does Clerk support Active Directory / LDAP identity federation?
Clerk does not support Active Directory / LDAP identity federation. No native LDAP/Active Directory protocol support. Microsoft Entra ID is supported via SAML/OIDC enterprise connections. Read more
Does Clerk support Azure Active Directory (Entra ID) identity federation?
Clerk supports Azure Active Directory (Entra ID) identity federation. Microsoft Entra ID SSO via SAML/OIDC enterprise connections. Available on Pro plan and above. Read more
Does Clerk support Bulk User Import user management?
Clerk supports Bulk User Import user management. Read more
Does Clerk support Password Hash Import (Multiple Formats) user management?
Clerk supports Password Hash Import (Multiple Formats) user management. Import password hashes (bcrypt, Argon2, etc.). Available on Pro plan and above. Read more
Does Clerk support Bulk User Export user management?
Clerk supports Bulk User Export user management. Read more
Does Clerk support Bulk User Update / Delete user management?
Clerk does not support Bulk User Update / Delete user management. Bulk update and delete are not available. Only individual user operations are supported via the Backend API. Bulk operations are on the roadmap. Read more
Does Clerk support Upsert on Import user management?
Clerk does not support Upsert on Import user management. No native upsert semantics on import. User creation via createUser() does not support upsert; separate create and update calls are required. Read more
Does Clerk support Legacy Username Import (Non-Allowed Characters) user management?
Clerk does not support Legacy Username Import (Non-Allowed Characters) user management. Clerk enforces username restrictions: Latin-based characters only (4-64 chars), no special characters (^$!.#+~). Legacy usernames with special characters or non-Latin scripts cannot be imported. Read more
Does Clerk support MFA Enrollment Import user management?
Clerk does not support MFA Enrollment Import user management. Importing TOTP/MFA enrollments with user data is not supported. Users must enroll MFA after being imported. Read more
Does Clerk support Inbound SCIM Provisioning user management?
Clerk partially supports Inbound SCIM Provisioning user management. SCIM available as part of the B2B Auth add-on. Available on Pro plan and above. Read more
Does Clerk support Outbound SCIM Provisioning user management?
Clerk does not support Outbound SCIM Provisioning user management. Clerk only supports inbound SCIM provisioning (IdP pushes to Clerk). Outbound provisioning (Clerk pushing changes to external apps) is not supported. Read more
Does Clerk support SCIM Groups Provisioning user management?
Clerk partially supports SCIM Groups Provisioning user management. Group/role sync via SCIM B2B Auth add-on. IdP groups are mapped to Clerk roles. Available on Pro plan and above. Read more
Does Clerk support Just-In-Time (JIT) User Provisioning user management?
Clerk supports Just-In-Time (JIT) User Provisioning user management. Just-in-time provisioning via enterprise SSO connections. Requires Pro plan and above. Read more
Does Clerk support Lazy / Trickle Migration from Legacy Database user management?
Clerk partially supports Lazy / Trickle Migration from Legacy Database user management. Gradual user migration supported on Pro plan and above. Read more
Does Clerk support Self-Service Profile Management Portal user management?
Clerk supports Self-Service Profile Management Portal user management. Built-in <UserProfile /> component for self-service account management. Read more
Does Clerk support User Account Linking user management?
Clerk supports User Account Linking user management. Read more
Does Clerk support User Blocking / Banning user management?
Clerk supports User Blocking / Banning user management. User bans and allowlists. Available on Pro plan and above. Read more
Does Clerk support User Metadata user management?
Clerk supports User Metadata user management. Public and private metadata stored per user. Read more
Does Clerk support Application Metadata user management?
Clerk supports Application Metadata user management. Unsafe (server-only writable) metadata for app-managed data. Read more
Does Clerk support Metadata Size Limits user management?
Clerk supports Metadata Size Limits user management. Metadata is limited to 8KB per user. When stored as custom session token claims, the recommended limit is 1.2KB to avoid cookie size issues. Read more
Does Clerk support User Search user management?
Clerk supports User Search user management. Read more
Does Clerk support Role-Based Access Control (RBAC) user management?
Clerk supports Role-Based Access Control (RBAC) user management. Role-based permissions within organizations. Available on Pro plan and above. Read more
Does Clerk support Organizations (Multi-Tenancy B2B) user management?
Clerk supports Organizations (Multi-Tenancy B2B) user management. B2B organization model with member management, roles, and invitations. Available on Pro plan and above. Read more
Does Clerk support Password Strength Policies user management?
Clerk supports Password Strength Policies user management. Custom password requirements available on Pro plan and above. Basic password validation on Free. Read more
Does Clerk support Username Restrictions user management?
Clerk supports Username Restrictions user management. Usernames must be 4-64 characters, Latin-based only. Special characters (^$!.#+~) and non-Latin scripts are not allowed to prevent Unicode spoofing attacks. Read more
Does Clerk support Progressive Profiling / Forms user management?
Clerk partially supports Progressive Profiling / Forms user management. Customizable sign-up forms with required fields. Available on Pro plan and above. Read more
Does Clerk support Attribute-Based Access Control (ABAC) access control?
Clerk does not support Attribute-Based Access Control (ABAC) access control.
Does Clerk support Fine-Grained Authorization (FGA / ReBAC) access control?
Clerk does not support Fine-Grained Authorization (FGA / ReBAC) access control.
Does Clerk support API Authorization (Scopes / Permissions) access control?
Clerk supports API Authorization (Scopes / Permissions) access control. Permission-based API authorization via organization roles. Requires Pro plan and above. Read more
Does Clerk support Audit Log Retention security feature?
Clerk supports Audit Log Retention security feature. Audit logs available on Pro plan and above. Read more
Does Clerk support Audit Log Streaming security feature?
Clerk does not support Audit Log Streaming security feature. Audit log streaming to external SIEM or data pipelines is not supported. Audit logs are viewable in the Clerk Dashboard only. Read more
Does Clerk support Security Center (Threat Monitoring Dashboard) security feature?
Clerk does not support Security Center (Threat Monitoring Dashboard) security feature. No dedicated threat monitoring or security center dashboard. Security features are distributed across the Clerk Dashboard. Read more
Does Clerk support Encryption at Rest security feature?
Clerk supports Encryption at Rest security feature. Read more
Does Clerk support Encryption in Transit security feature?
Clerk supports Encryption in Transit security feature. Read more
Does Clerk support Customer Managed Keys (BYOK) security feature?
Clerk does not support Customer Managed Keys (BYOK) security feature. Clerk does not support customer-managed encryption keys (BYOK). Encryption keys are managed by Clerk. Read more
Does Clerk support Bot Detection security feature?
Clerk supports Bot Detection security feature. Read more
Does Clerk support Brute Force Protection security feature?
Clerk supports Brute Force Protection security feature. Read more
Does Clerk support Suspicious IP Throttling security feature?
Clerk does not support Suspicious IP Throttling security feature. No dedicated suspicious IP throttling feature. Clerk applies general rate limits per IP for the Frontend API. Read more
Does Clerk support Breached Password Detection security feature?
Clerk supports Breached Password Detection security feature. Read more
Does Clerk support Credential Guard (Dark Web Monitoring) security feature?
Clerk does not support Credential Guard (Dark Web Monitoring) security feature. No standalone credential guard or dark web monitoring product. Compromised password detection via HaveIBeenPwned is covered under breached_password_detection. Read more
Does Clerk support Tenant Access Control List (IP ACL) security feature?
Clerk does not support Tenant Access Control List (IP ACL) security feature. No IP-based access control lists. Clerk supports email/phone-based allowlists and blocklists for sign-up and sign-in restrictions. Read more
Does Clerk support Device Fingerprinting security feature?
Clerk does not support Device Fingerprinting security feature. No user-facing device fingerprinting feature. Clerk uses device/network analysis internally for bot detection. Read more
Does Clerk support Per-Organization Branding multi-tenancy?
Clerk supports Per-Organization Branding multi-tenancy. Per-organization logo, name, and slug. Available on Pro plan and above. Read more
Does Clerk support Per-Organization MFA Policy multi-tenancy?
Clerk does not support Per-Organization MFA Policy multi-tenancy. MFA can be enforced globally for the entire application but not configured independently per organization. Read more
Does Clerk support Hosted / Universal Login Page branding feature?
Clerk supports Hosted / Universal Login Page branding feature. Clerk's Account Portal provides a hosted sign-in/sign-up page. Read more
Does Clerk support Embedded / Native Login Components branding feature?
Clerk supports Embedded / Native Login Components branding feature. Best-in-class prebuilt React components: <SignIn />, <SignUp />, <UserButton />, etc. Read more
Does Clerk support White-Label / Full Brand Removal branding feature?
Clerk supports White-Label / Full Brand Removal branding feature. Remove Clerk branding and use custom domain. Available on Pro plan and above. Read more
Does Clerk support Localization / i18n branding feature?
Clerk supports Localization / i18n branding feature. Built-in i18n support with localizations for many languages. Read more
Does Clerk support Prebuilt UI Components (SDK) branding feature?
Clerk supports Prebuilt UI Components (SDK) branding feature. Prebuilt React, Next.js, Remix, and Expo components for all auth flows. Read more
Does Clerk support Login / Auth Analytics Dashboard analytics?
Clerk supports Login / Auth Analytics Dashboard analytics. Dashboard analytics for sign-ins, sign-ups, and active users. Read more
Does Clerk support SOC 2 Type II Certification compliance?
Clerk supports SOC 2 Type II Certification compliance. Read more
Does Clerk support ISO 27001 / 27017 / 27018 Certification compliance?
Clerk does not support ISO 27001 / 27017 / 27018 Certification compliance. Clerk has implemented an ISMS aligned with ISO/IEC 27001:2022 and its infrastructure providers (AWS, Google Cloud) are ISO 27001 certified, but Clerk itself does not hold a third-party ISO 27001 certification. Read more
Does Clerk support HIPAA Business Associate Agreement (BAA) compliance?
Clerk supports HIPAA Business Associate Agreement (BAA) compliance. HIPAA compliance available as an option on the Business plan and above. Read more
Does Clerk support PCI DSS Compliance compliance?
Clerk does not support PCI DSS Compliance compliance. Clerk does not hold a PCI DSS certification or attestation of compliance. Read more
Does Clerk support CSA STAR Certification compliance?
Clerk does not support CSA STAR Certification compliance. Clerk does not hold a CSA STAR certification. Read more
Does Clerk support FedRAMP Authorization compliance?
Clerk does not support FedRAMP Authorization compliance.
Does Clerk support GDPR: Data Export (Portability) compliance?
Clerk supports GDPR: Data Export (Portability) compliance.
Does Clerk support GDPR: Right to be Forgotten (User Deletion) compliance?
Clerk supports GDPR: Right to be Forgotten (User Deletion) compliance.
Does Clerk support Consent Management compliance?
Clerk does not support Consent Management compliance.
Does Clerk support Region Deployment compliance?
Clerk does not support Region Deployment compliance. Clerk is a SaaS-only product with no data residency selection.
Does Clerk support Private Cloud Deployment compliance?
Clerk does not support Private Cloud Deployment compliance.
Does Clerk support SDK Coverage developer integration?
Clerk supports SDK Coverage developer integration. SDKs for React, Next.js, Remix, Expo, React Native, and backend SDKs for Node.js, Go, Python, Ruby, and more. Read more
Does Clerk support Management API developer integration?
Clerk supports Management API developer integration. Read more
Does Clerk support Authentication API Rate Limits developer integration?
Clerk supports Authentication API Rate Limits developer integration. Read more
Does Clerk support Actions / Extensibility Pipeline developer integration?
Clerk partially supports Actions / Extensibility Pipeline developer integration. Webhooks and backend SDK override hooks. No server-side action pipeline. Read more
Does Clerk support TypeScript Support in Extensibility developer integration?
Clerk supports TypeScript Support in Extensibility developer integration. Clerk's backend SDKs are fully TypeScript-native.
Does Clerk support Custom Domain developer integration?
Clerk supports Custom Domain developer integration. Custom domain available on Pro plan and above. Read more
Does Clerk support Deploy CLI (Infrastructure as Code) developer integration?
Clerk partially supports Deploy CLI (Infrastructure as Code) developer integration. Clerk CLI supports config pull/patch for managing instance settings as code. A dedicated 'clerk deploy' command for syncing configuration to production is in development. Read more
Does Clerk support Terraform Provider developer integration?
Clerk supports Terraform Provider developer integration. Official Terraform provider for managing Clerk configuration. Read more
Does Clerk support Custom Database Connections developer integration?
Clerk does not support Custom Database Connections developer integration.
Does Clerk support Native Webhook Support developer integration?
Clerk supports Native Webhook Support developer integration. Read more
Does Clerk support Universal Login / Hosted Login Page Customization developer integration?
Clerk supports Universal Login / Hosted Login Page Customization developer integration. Full visual customization via the Clerk Dashboard appearance settings. Read more
Does Clerk support Custom Email Provider (SMTP) developer integration?
Clerk partially supports Custom Email Provider (SMTP) developer integration. Clerk's built-in email delivery (SendGrid) can be disabled. Custom email delivery is handled by listening to the emails.created webhook and managing dispatch yourself. No native SMTP configuration. Read more
Does Clerk support Email Templates developer integration?
Clerk supports Email Templates developer integration. Read more
Does Clerk support Custom OIDC Claims / Token Enrichment developer integration?
Clerk supports Custom OIDC Claims / Token Enrichment developer integration. Custom claims can be added to session tokens and JWT templates via the Clerk Dashboard. Supports shortcodes for dynamic user attribute values. Read more
Does Clerk support No-Code Auth Flow Builder / Orchestration feature?
Clerk does not support No-Code Auth Flow Builder / Orchestration feature.
Does Clerk support Identity Verification / Document Proofing feature?
Clerk does not support Identity Verification / Document Proofing feature.
Does Clerk support Decentralized / Verifiable Credentials feature?
Clerk does not support Decentralized / Verifiable Credentials feature.
Does Clerk support Built-in Billing / Subscription Management feature?
Clerk supports Built-in Billing / Subscription Management feature. Built-in Stripe billing with <PricingTable />, <PlanBadge />, and subscription management. Platform fee of 0.7% of revenue. Available on Pro plan and above. Read more
Does Clerk support Agentic AI / MCP Server Authentication feature?
Clerk supports Agentic AI / MCP Server Authentication feature. Clerk supports MCP server authentication, the @clerk/agent-toolkit for Vercel AI SDK and LangChain, and OAuth-secured MCP endpoints for AI agent identity. Read more
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.