# Clerk Articles (index)

> Index of every Clerk article. Each entry links to the full article on clerk.com.

## Companion files

- [Clerk root index](https://clerk.com/llms.txt): Top-level Clerk index for LLMs and agents
- [Blog index](https://clerk.com/blog/llms.txt): Index of every Clerk blog post
- [Changelog index](https://clerk.com/changelog/llms.txt): Index of every Clerk changelog entry
- [Glossary index](https://clerk.com/glossary/llms.txt): Index of every Clerk glossary entry
- [Dashboard index](https://dashboard.clerk.com/llms.txt): Index of the Clerk Dashboard for LLMs and agents

---

- [Role-Based Access Control (RBAC) for B2B SaaS](https://clerk.com/articles/role-based-access-control-rbac-for-b2b-saas.md): Role-based access control explained through NIST and ANSI standards: flat, hierarchical, constrained, and symmetric RBAC compared against ABAC, ACLs, and ReBAC to help B2B SaaS teams choose the right model.
  - Part 2 of 2: https://clerk.com/articles/role-based-access-control-rbac-for-b2b-saas-2.md
- [Multi-Tenant B2B Auth: Clerk or Auth0?](https://clerk.com/articles/multi-tenant-b2b-auth-clerk-or-auth0.md): Clerk Organizations vs Auth0 Organizations for multi-tenant B2B SaaS — how each handles org switching, roles, and per-organization SSO, what they cost, and when to pick which.
- [Next.js Authentication Guide 2026](https://clerk.com/articles/nextjs-authentication-guide-2026.md): Part 1 of 2 builds production Next.js authentication with Clerk in the App Router: defense in depth, step-by-step setup, Dashboard configuration, and the Proxy and session pitfalls to avoid.
  - Part 2 of 2: https://clerk.com/articles/nextjs-authentication-guide-2026-2.md
- [Build vs Buy Authentication: The Real Cost of Rolling Your Own Auth](https://clerk.com/articles/build-vs-buy-authentication-the-real-cost-of-rolling-your-own-auth.md): Part 1 of 2: the real cost of building your own authentication — build time, endless maintenance, breach liability, compliance, and 3-year TCO — versus buying Clerk.
  - Part 2 of 2: https://clerk.com/articles/build-vs-buy-authentication-the-real-cost-of-rolling-your-own-auth-2.md
- [Moving Beyond Auth0: A Guide for Modern Development Teams](https://clerk.com/articles/moving-beyond-auth0-a-guide-for-modern-development-teams.md): Compare Auth0 alternatives for 2026: pricing, dev experience, and complexity. See why Clerk often wins for modern app teams, plus honest exceptions where it doesn't.
- [Authentication + Billing: How Clerk and Stripe Work Together](https://clerk.com/articles/authentication-billing-how-clerk-and-stripe-work-together.md): Clerk Billing's native Stripe integration puts plan and feature entitlements on the session token you already verify. Part 1 covers the architecture and a B2C paywall setup.
  - Part 2 of 2: https://clerk.com/articles/authentication-billing-how-clerk-and-stripe-work-together-2.md
- [Clerk vs AWS Cognito: Developer Experience vs Scale Economics](https://clerk.com/articles/clerk-vs-aws-cognito-developer-experience-vs-scale-economics.md): Part 1 of 3: Clerk vs AWS Cognito on developer experience — drop-in components, Next.js 16 SSR, session management, and building a custom sign-in with MFA.
  - Part 2 of 3: https://clerk.com/articles/clerk-vs-aws-cognito-developer-experience-vs-scale-economics-2.md
  - Part 3 of 3: https://clerk.com/articles/clerk-vs-aws-cognito-developer-experience-vs-scale-economics-3.md
- [Can Clerk Handle Enterprise Requirements?](https://clerk.com/articles/can-clerk-handle-enterprise-requirements.md): Can Clerk handle enterprise requirements? Yes for the core checklist — SAML/OIDC SSO, SCIM, organizations, RBAC, SOC 2, HIPAA, and a 99.99% SLA — with honest caveats, versus Auth0, WorkOS, and Okta.
- [Clerk Security: How We Protect Your Users](https://clerk.com/articles/clerk-security-how-we-protect-your-users.md): Is Clerk secure? Clerk is SOC 2 Type 2 and HIPAA certified, patches every disclosed vulnerability within days, and publishes its full CVE history, uptime record, and outage postmortems.
- [Clerk vs Auth0: Which Authentication Platform Fits Your Team?](https://clerk.com/articles/clerk-vs-auth0-which-authentication-platform-fits-your-team.md): Part 1 of a Clerk vs Auth0 comparison: how Clerk's embedded components stack up against Auth0's hosted Universal Login on developer experience, framework-native SDKs, and Next.js setup.
  - Part 2 of 3: https://clerk.com/articles/clerk-vs-auth0-which-authentication-platform-fits-your-team-2.md
  - Part 3 of 3: https://clerk.com/articles/clerk-vs-auth0-which-authentication-platform-fits-your-team-3.md
- [How to Evaluate Authentication Providers: A Developer’s Checklist](https://clerk.com/articles/how-to-evaluate-authentication-providers-a-developer-s-checklist.md): Part 1 of 3: the methodology for scoring authentication providers on a weighted 1–10 checklist, plus dimensions 1–7 (auth methods, SSO, SCIM, security) — Clerk, Auth0, WorkOS, and more.
  - Part 2 of 3: https://clerk.com/articles/how-to-evaluate-authentication-providers-a-developer-s-checklist-2.md
  - Part 3 of 3: https://clerk.com/articles/how-to-evaluate-authentication-providers-a-developer-s-checklist-3.md
- [Authentication for Serverless and Edge Deployments](https://clerk.com/articles/authentication-for-serverless-and-edge-deployments.md): Part 1 of 3: why ephemeral serverless and edge runtimes break traditional session auth, and the stateless JWT, JWKS, and architectural patterns behind edge-ready providers like Clerk.
  - Part 2 of 3: https://clerk.com/articles/authentication-for-serverless-and-edge-deployments-2.md
  - Part 3 of 3: https://clerk.com/articles/authentication-for-serverless-and-edge-deployments-3.md
- [Clerk Compatibility in Expo 54 and 55](https://clerk.com/articles/clerk-compatibility-in-expo-54-and-55.md): Clerk's @clerk/expo v3.1.x supports Expo SDK 54 and 55. Part 1 of 2 covers version requirements, the New Architecture, Expo Go limits, and Google, Apple, SSO, passkey, and biometric sign-in.
  - Part 2 of 2: https://clerk.com/articles/clerk-compatibility-in-expo-54-and-55-2.md
- [How to Add Authentication to a Python Backend](https://clerk.com/articles/how-to-add-authentication-to-a-python-backend.md): Part 1 of 3: how Python backend authentication actually works with Clerk — the verify-the-token model, token formats, your DIY-vs-managed options, and Clerk Python SDK setup.
  - Part 2 of 3: https://clerk.com/articles/how-to-add-authentication-to-a-python-backend-2.md
  - Part 3 of 3: https://clerk.com/articles/how-to-add-authentication-to-a-python-backend-3.md
- [How to Add Face ID/Biometric Login to Your Expo+Clerk App](https://clerk.com/articles/how-to-add-face-id-biometric-login-to-your-expo-clerk-app.md): Part 1 of a two-part guide: set up an Expo project with Clerk email/password auth, check device biometric availability, and store credentials behind Face ID or fingerprint.
  - Part 2 of 2: https://clerk.com/articles/how-to-add-face-id-biometric-login-to-your-expo-clerk-app-2.md
- [How to Use AuthView in an Expo App: Native Authentication with Clerk](https://clerk.com/articles/how-to-use-authview-in-an-expo-app-native-authentication-with-clerk.md): Part 1 of 2: configure a Clerk application, scaffold an Expo project, and build a native sign-in and sign-up screen with Clerk's AuthView component—no WebView required.
  - Part 2 of 2: https://clerk.com/articles/how-to-use-authview-in-an-expo-app-native-authentication-with-clerk-2.md
- [How to use SwiftUI components in a React Expo and Clerk app](https://clerk.com/articles/how-to-use-swiftui-components-in-a-react-expo-and-clerk-app.md): Part 1 of a two-part guide to building a React Native Expo app with Clerk's native SwiftUI components: why native auth beats WebView OAuth, Expo setup, and Google Sign-In.
  - Part 2 of 2: https://clerk.com/articles/how-to-use-swiftui-components-in-a-react-expo-and-clerk-app-2.md
- [How to Handle Session Expiry in a React Native App with Clerk](https://clerk.com/articles/how-to-handle-session-expiry-in-a-react-native-app-with-clerk.md): Part 1 of 2: Clerk's two-token architecture, session-lifetime config, and the hooks that detect expiry, with background and offline handling in a React Native Expo app.
  - Part 2 of 2: https://clerk.com/articles/how-to-handle-session-expiry-in-a-react-native-app-with-clerk-2.md
- [How to Set Up Clerk Authentication with Expo Router: Protected Routes, MFA, and Social Login](https://clerk.com/articles/how-to-set-up-clerk-authentication-with-expo-router-protected-routes-mfa-and-soc.md): Set up the authentication foundation for a React Native app with Clerk and Expo Router — ClerkProvider, secure token caching, sign-in/sign-up screens, and protected routes. Part 1 of 2.
  - Part 2 of 2: https://clerk.com/articles/how-to-set-up-clerk-authentication-with-expo-router-protected-routes-mfa-and-soc-2.md
- [The real cost of enterprise SSO: per-connection vs per-MAU pricing](https://clerk.com/articles/the-real-cost-of-enterprise-sso-per-connection-vs-per-mau-p.md): Part 1 of 4: per-connection vs per-MAU enterprise SSO pricing explained, why the real bill outruns the sticker, and how Clerk's MRU-based model fits B2B SaaS.
  - Part 2 of 4: https://clerk.com/articles/the-real-cost-of-enterprise-sso-per-connection-vs-per-mau-p-2.md
  - Part 3 of 4: https://clerk.com/articles/the-real-cost-of-enterprise-sso-per-connection-vs-per-mau-p-3.md
  - Part 4 of 4: https://clerk.com/articles/the-real-cost-of-enterprise-sso-per-connection-vs-per-mau-p-4.md
- [What Is Auth-as-a-Service? The Complete Guide](https://clerk.com/articles/what-is-auth-as-a-service-the-complete-guide.md): Part 1 of a four-part auth-as-a-service guide: what AaaS is, its core capabilities, and the crucial authentication-vs-authorization distinction — with Clerk throughout.
  - Part 2 of 4: https://clerk.com/articles/what-is-auth-as-a-service-the-complete-guide-2.md
  - Part 3 of 4: https://clerk.com/articles/what-is-auth-as-a-service-the-complete-guide-3.md
  - Part 4 of 4: https://clerk.com/articles/what-is-auth-as-a-service-the-complete-guide-4.md
- [Adding Okta SSO to a React app: SAML and OIDC walkthrough](https://clerk.com/articles/adding-okta-sso-to-a-react-app-saml-and-oidc-walkthrough.md): Part 1 of 3: pick OIDC or SAML for a React SPA, set up your Okta org, and implement browser-native OIDC with Authorization Code + PKCE — with Clerk as the managed alternative.
  - Part 2 of 3: https://clerk.com/articles/adding-okta-sso-to-a-react-app-saml-and-oidc-walkthrough-2.md
  - Part 3 of 3: https://clerk.com/articles/adding-okta-sso-to-a-react-app-saml-and-oidc-walkthrough-3.md
- [Auth Platforms With SSO and SCIM in the Base Tier](https://clerk.com/articles/auth-platforms-with-sso-and-scim-in-the-base-tier.md): Part 1 of 2: a primer on enterprise SSO and SCIM, the shift from the SSO tax to the new SCIM tax, and a sourced matrix comparing Clerk, Auth0, WorkOS, and Supabase pricing.
  - Part 2 of 2: https://clerk.com/articles/auth-platforms-with-sso-and-scim-in-the-base-tier-2.md
- [Authentication for AI Applications](https://clerk.com/articles/authentication-for-ai-applications.md): Part 1 of 2: authenticate both the user and the AI agent behind every request, covering user-delegated and autonomous M2M patterns, token scoping, and delegation in Clerk.
  - Part 2 of 2: https://clerk.com/articles/authentication-for-ai-applications-2.md
- [Authentication for Astro Sites](https://clerk.com/articles/authentication-for-astro-sites.md): Part 1 of a four-part series on Astro authentication: how Astro's SSR vs SSG rendering model reshapes auth, and how Clerk compares to Auth.js, Supabase, Firebase, and Auth0.
  - Part 2 of 4: https://clerk.com/articles/authentication-for-astro-sites-2.md
  - Part 3 of 4: https://clerk.com/articles/authentication-for-astro-sites-3.md
  - Part 4 of 4: https://clerk.com/articles/authentication-for-astro-sites-4.md
- [Authentication for Remix Applications](https://clerk.com/articles/authentication-for-remix-applications.md): Add Clerk to a React Router v7 (Remix) app: install @clerk/react-router, wire up sign-in and sign-up UI, protect loaders and actions, and read session data. Part 1 of 2.
  - Part 2 of 2: https://clerk.com/articles/authentication-for-remix-applications-2.md
- [Authentication Trends in 2026: Passkeys, AI Agents, and Edge](https://clerk.com/articles/authentication-trends-in-2026-passkeys-ai-agents-and-edge.md): Part 1 of Clerk's four-part 2026 authentication series: why passkeys went mainstream — 15B+ enabled accounts, FIDO success data, and the threats and regulations driving passwordless.
  - Part 2 of 4: https://clerk.com/articles/authentication-trends-in-2026-passkeys-ai-agents-and-edge-2.md
  - Part 3 of 4: https://clerk.com/articles/authentication-trends-in-2026-passkeys-ai-agents-and-edge-3.md
  - Part 4 of 4: https://clerk.com/articles/authentication-trends-in-2026-passkeys-ai-agents-and-edge-4.md
- [EASIE SSO: What It Is and Which Providers Support It](https://clerk.com/articles/easie-sso-what-it-is-and-which-providers-support-it.md): Part 1 of a two-part guide to EASIE SSO: what it is and how its OpenID Connect, email-domain enrollment, and multi-tenant mechanics work, from Clerk, author of the EASIE spec.
  - Part 2 of 2: https://clerk.com/articles/easie-sso-what-it-is-and-which-providers-support-it-2.md
- [Expo Google Sign-In Without a WebView: The Native Approach Using Clerk](https://clerk.com/articles/expo-google-sign-in-without-a-webview-the-native-approach-using-clerk.md): Part 1 of 2: configure Clerk, Google Cloud, and an Expo dev build for native Google Sign-In without a WebView, then add it with Clerk's pre-built AuthView component.
  - Part 2 of 2: https://clerk.com/articles/expo-google-sign-in-without-a-webview-the-native-approach-using-clerk-2.md
- [Federated identity for enterprise SaaS: SAML, OIDC, and SCIM](https://clerk.com/articles/federated-identity-for-enterprise-saas-saml-oidc-and-scim.md): Part 1 of a federated identity guide for enterprise SaaS: how SAML, OIDC, and SCIM work, plus a capability matrix comparing Clerk, WorkOS, Auth0, and three more providers.
  - Part 2 of 2: https://clerk.com/articles/federated-identity-for-enterprise-saas-saml-oidc-and-scim-2.md
- [How to Protect Routes in Expo Router with Clerk](https://clerk.com/articles/how-to-protect-routes-in-expo-router-with-clerk.md): Part 1 of a two-part guide to protecting Expo Router routes with Clerk: configure ClerkProvider, split public and private route groups, and guard screens with Stack.Protected or useAuth.
  - Part 2 of 2: https://clerk.com/articles/how-to-protect-routes-in-expo-router-with-clerk-2.md
- [HR-driven offboarding for B2B SaaS: SCIM, webhooks, and audit trails](https://clerk.com/articles/hr-driven-offboarding-for-b2b-saas-scim-webhooks-and-audi.md): Part 1 of 2: how SCIM, webhooks, and audit trails automate HR-driven offboarding for B2B SaaS, plus a vendor survey covering Clerk, Okta, Entra ID, Auth0, and WorkOS.
  - Part 2 of 2: https://clerk.com/articles/hr-driven-offboarding-for-b2b-saas-scim-webhooks-and-audi-2.md
- [Migrating from @clerk/clerk-expo to @clerk/expo — Breaking Changes, Native Components, and the Complete Upgrade Path](https://clerk.com/articles/migrating-from-clerk-clerk-expo-to-clerk-expo-breaking-changes-native-components.md): Part 1 of Clerk's @clerk/clerk-expo to @clerk/expo (Core 3) migration: the upgrade CLI, package renames, required publishableKey, the Show component, and redesigned sign-in/sign-up hooks.
  - Part 2 of 2: https://clerk.com/articles/migrating-from-clerk-clerk-expo-to-clerk-expo-breaking-changes-native-components-2.md
- [OIDC vs SAML for Enterprise SSO: A 2026 Decision Guide](https://clerk.com/articles/oidc-vs-saml-for-enterprise-sso-a-2026-decision-guide.md): Part 1 of 4: a precise primer on OIDC and SAML, then a head-to-head comparison of token format, platform fit, and security for enterprise SSO in 2026 — the baseline for Clerk's decision framework.
  - Part 2 of 4: https://clerk.com/articles/oidc-vs-saml-for-enterprise-sso-a-2026-decision-guide-2.md
  - Part 3 of 4: https://clerk.com/articles/oidc-vs-saml-for-enterprise-sso-a-2026-decision-guide-3.md
  - Part 4 of 4: https://clerk.com/articles/oidc-vs-saml-for-enterprise-sso-a-2026-decision-guide-4.md
- [Expo Go or Development Build? Building Production-Ready Authentication with Clerk](https://clerk.com/articles/expo-go-or-development-build-building-production-ready-authentication-with-clerk.md): Part 1 of a production-ready Expo authentication build with Clerk: when to use Expo Go vs a development build, plus project setup, native UI components, and native Google Sign-In.
  - Part 2 of 2: https://clerk.com/articles/expo-go-or-development-build-building-production-ready-authentication-with-clerk-2.md
- [Microsoft Entra ID SAML integration for SaaS apps](https://clerk.com/articles/microsoft-entra-id-saml-integration-for-saas-apps.md): Part 1 of 2: set up Microsoft Entra ID as a SAML IdP for a SaaS app — licensing, a six-step Zendesk walkthrough, claims mapping, and certificate rotation, before Part 2's SCIM and Clerk guidance.
  - Part 2 of 2: https://clerk.com/articles/microsoft-entra-id-saml-integration-for-saas-apps-2.md
- [SCIM 2.0 explained: a practical guide for SaaS auth](https://clerk.com/articles/scim-2-0-explained-a-practical-guide-for-saas-auth.md): Part 1 of 4: what SCIM 2.0 is and how its REST/JSON endpoints and core operations automate the user provisioning lifecycle, plus where Clerk and other providers fit.
  - Part 2 of 4: https://clerk.com/articles/scim-2-0-explained-a-practical-guide-for-saas-auth-2.md
  - Part 3 of 4: https://clerk.com/articles/scim-2-0-explained-a-practical-guide-for-saas-auth-3.md
  - Part 4 of 4: https://clerk.com/articles/scim-2-0-explained-a-practical-guide-for-saas-auth-4.md
- [Add Clerk authentication to a React app with the Clerk CLI](https://clerk.com/articles/add-clerk-authentication-to-a-react-app-with-the-clerk-cli.md): Scaffold a Vite + React 19 single-page app with Clerk authentication in one command. Part 1 of 2: install the Clerk CLI, run clerk init --starter, pull env keys, and sign up a test user.
  - Part 2 of 2: https://clerk.com/articles/add-clerk-authentication-to-a-react-app-with-the-clerk-cli-2.md
- [Add Clerk authentication to a TanStack Start app with the Clerk CLI](https://clerk.com/articles/add-clerk-authentication-to-a-tanstack-start-app-with-the-clerk-cli.md): Part 1 of 2: use the Clerk CLI to scaffold a TanStack Start app and run clerk init, wiring ClerkProvider, auth routes, and middleware, then verify your setup with clerk doctor.
  - Part 2 of 2: https://clerk.com/articles/add-clerk-authentication-to-a-tanstack-start-app-with-the-clerk-cli-2.md
- [SCIM vs JIT provisioning: when to use each](https://clerk.com/articles/scim-vs-jit-provisioning-when-to-use-each.md): JIT provisioning onboards users at first SSO login but cannot offboard them. Part 1 of 2 covers the deprovisioning gap, a five-factor framework, and Clerk's enterprise identity paths.
  - Part 2 of 2: https://clerk.com/articles/scim-vs-jit-provisioning-when-to-use-each-2.md
- [Best SSO and MFA Providers for B2B SaaS in 2026](https://clerk.com/articles/best-sso-and-mfa-providers-for-b2b-saas.md): Compare the best SSO and MFA providers for B2B SaaS in 2026 — Clerk, WorkOS, Auth0, Kinde, Stytch, and FusionAuth ranked on integration speed, enterprise readiness, SCIM, and pricing at scale.
- [Clerk Pricing Explained](https://clerk.com/articles/clerk-pricing-explained.md): Clerk's free Hobby plan now covers 50,000 monthly retained users, not 10,000 MAU. A 2026 guide to every plan, pre-calculated costs at 1K-100K users, and Clerk vs Auth0, WorkOS, and Supabase.
- [HR-driven offboarding for B2B SaaS: SCIM, webhooks, and audit trails](https://clerk.com/articles/hr-driven-offboarding-for-b2b-saas-scim-webhooks-and-audit-trails.md): HR-driven offboarding revokes a departed employee's access automatically. Compare how Clerk, Auth0, WorkOS, Okta, and Entra ID use SCIM, webhooks, and audit trails to do it for B2B SaaS.
- [The real cost of enterprise SSO: per-connection vs per-MAU pricing](https://clerk.com/articles/the-real-cost-of-enterprise-sso-per-connection-vs-per-mau-pricing.md): Enterprise SSO costs far more than the sticker price. Compare per-connection vs per-MAU pricing, the SSO tax, SCIM fees, and build-vs-buy across WorkOS, Auth0, Okta, and Clerk.
- [Add Clerk authentication to a Next.js app with the Clerk CLI](https://clerk.com/articles/add-clerk-authentication-to-a-next-js-app-with-the-clerk-cli.md): The Clerk CLI adds authentication to a Next.js 16 App Router app end-to-end: scaffold, pull keys, patch passkeys as code, and validate wiring — no dashboard round-trip.
- [How to add SSO and SAML to my SaaS Product](https://clerk.com/articles/how-to-add-sso-and-saml-to-my-saas-product.md): Part 1 of 4: why enterprise buyers demand SAML SSO, the SOC 2/ISO/HIPAA and security drivers behind it, and how SAML, OIDC, and OAuth differ — groundwork for adding SSO to your SaaS with Clerk.
  - Part 2 of 4: https://clerk.com/articles/how-to-add-sso-and-saml-to-my-saas-product-2.md
  - Part 3 of 4: https://clerk.com/articles/how-to-add-sso-and-saml-to-my-saas-product-3.md
  - Part 4 of 4: https://clerk.com/articles/how-to-add-sso-and-saml-to-my-saas-product-4.md
- [How to Set Up Clerk Authentication with Expo Router](https://clerk.com/articles/how-to-set-up-clerk-authentication-with-expo-router.md): Build secure React Native apps with Clerk and Expo Router — covering protected routes, MFA, Google and Apple sign-in, and production-ready auth patterns with full code samples.
- [What Changed in Clerk Expo SDK 3.1](https://clerk.com/articles/what-changed-in-clerk-expo-sdk-3-1.md): Clerk Expo SDK 3.1 ships native SwiftUI and Jetpack Compose auth components, native Google Sign-In, and Core 3 API changes with full migration guidance for Expo apps.
- [From setActive to finalize: Migrating Custom Auth Flows to Clerk Core 3](https://clerk.com/articles/from-setactive-to-finalize-migrating-custom-auth-flows-to-clerk-core-3.md): Migrate Clerk custom auth flows from Core 2 to Core 3 — replace setActive with finalize, swap beforeEmit for navigate, and use decorateUrl for environment-aware routing.
- [Clerk vs Firebase Authentication for Expo](https://clerk.com/articles/clerk-vs-firebase-authentication-for-expo.md): A detailed comparison of Clerk and Firebase Auth for Expo apps. Covers setup, native components, passkeys, session management, organizations, and SDK stability across Expo SDK upgrades.
- [Native vs. Browser OAuth in Expo](https://clerk.com/articles/native-vs-browser-oauth-in-expo-a-decision-guide-for-social-login.md): Compare browser-based and native OAuth approaches for Expo social login. Covers Google Sign-In, Apple Sign-In, passkeys, Credential Manager, ASAuthorization, and provider comparison with code examples.
- [React Authentication: From Protected Routes to Passkeys](https://clerk.com/articles/react-authentication-from-protected-routes-to-passkeys.md): The foundations of React authentication: protect routes, manage auth state with React Context, store tokens in httpOnly cookies, and add OAuth 2.0 PKCE social login — DIY vs Clerk. Part 1 of 2.
  - Part 2 of 2: https://clerk.com/articles/react-authentication-from-protected-routes-to-passkeys-2.md
- [The best APIs for secure user authentication](https://clerk.com/articles/the-best-apis-for-secure-user-authentication.md): Part 1 of a security-first comparison of six auth APIs — Clerk, Auth0, Firebase, Supabase, WorkOS, and AWS Cognito — covering OAuth/OIDC, zero-trust principles, and token architecture.
  - Part 2 of 2: https://clerk.com/articles/the-best-apis-for-secure-user-authentication-2.md
- [How do I implement social login for my web app?](https://clerk.com/articles/how-do-i-implement-social-login-for-my-web-app.md): Part 1 of 3: OAuth 2.0 and OIDC fundamentals, a 15-provider comparison, and wiring social login into Next.js, React, Vue, and Astro apps with Clerk's prebuilt components.
  - Part 2 of 3: https://clerk.com/articles/how-do-i-implement-social-login-for-my-web-app-2.md
  - Part 3 of 3: https://clerk.com/articles/how-do-i-implement-social-login-for-my-web-app-3.md
- [User Management for React Apps](https://clerk.com/articles/comprehensive-user-management-solutions-for-modern-react-applications.md): The complete 2025 guide to user management for React and Next.js. Compare Clerk, Auth0, Cognito, and more. Covers build vs. buy, security, B2B patterns, and compliance.
- [How to sync Clerk user data to your database](https://clerk.com/articles/how-to-sync-clerk-user-data-to-your-database.md): Part 1 of Clerk's two-part guide to syncing user data to your database: webhook setup, Svix signature verification, Prisma and Drizzle schemas, and idempotent Next.js and Express handlers.
  - Part 2 of 2: https://clerk.com/articles/how-to-sync-clerk-user-data-to-your-database-2.md
- [Next.js Session Management](https://clerk.com/articles/nextjs-session-management-solving-nextauth-persistence-issues.md): Diagnose and fix NextAuth session failures in Next.js—missing AUTH_SECRET, cookie misconfigurations, JWT mismatches, and Edge runtime crashes—and see how Clerk removes these failure modes.
- [Essential user management features for startups](https://clerk.com/articles/essential-user-management-features-startups.md): Part 1 of 2: the core authentication, authorization, and security features startups need, compared across Clerk, Auth0, Firebase, and AWS Cognito by growth stage.
  - Part 2 of 2: https://clerk.com/articles/essential-user-management-features-startups-2.md
- [Best Embeddable UIs for Auth](https://clerk.com/articles/complete-guide-to-embeddable-uis-for-user-management.md): Part 1 of comparing embeddable user management UIs: why custom auth costs months, and how Clerk, Auth0, WorkOS, Supabase, and Firebase compare on setup, security, and cost.
  - Part 2 of 2: https://clerk.com/articles/complete-guide-to-embeddable-uis-for-user-management-2.md
- [Best User Management APIs for Developers](https://clerk.com/articles/best-user-management-apis-for-developers.md): Part 1 of our user management API comparison: how Clerk, Auth0, Firebase, and AWS Cognito differ on REST design, SDKs, webhooks, rate limits, and setup speed.
  - Part 2 of 2: https://clerk.com/articles/best-user-management-apis-for-developers-2.md
- [User Management Platform Comparison for React: Clerk vs Auth0 vs Firebase (2025)](https://clerk.com/articles/user-management-platform-comparison-react-clerk-auth0-firebase.md): Compare Clerk, Auth0, and Firebase for React user management—user profiles, RBAC, B2B organizations, and multi-tenant data isolation—to choose the right architecture.
  - Part 2 of 2: https://clerk.com/articles/user-management-platform-comparison-react-clerk-auth0-firebase-2.md
- [How to Add Auth to App Router](https://clerk.com/articles/complete-authentication-guide-for-nextjs-app-router.md): Master Next.js App Router authentication in 2025. Compare Clerk, NextAuth.js, Supabase Auth performance & security. Fix CVE-2025-29927 vulnerability. 30-minute setup guide with React Server Components patterns.
- [Clerk vs Auth0 for Next.js](https://clerk.com/articles/clerk-vs-auth0-for-nextjs.md): Clerk vs Auth0 for Next.js: Compare setup time, pricing, performance, and Next.js 15 support. Technical analysis with code examples and cost breakdowns
- [Next.js Authentication for AI Applications](https://clerk.com/articles/nextjs-authentication-for-ai-apps-security-guide.md): Learn how to secure Next.js AI applications against CVE-2025-29927, prompt injection, and MCP vulnerabilities. Complete authentication guide with Clerk implementation, code examples, and enterprise patterns. Setup in 7 minutes vs 3-6 weeks custom build.
- [Organizations and role-based access control in Next.js](https://clerk.com/articles/organizations-and-role-based-access-control-in-nextjs.md): Learn how to implement secure role-based access control (RBAC) and multi-tenant organizations in Next.js applications. Compare Clerk, Auth0, Supabase, and custom solutions with code examples, security best practices, and CVE-2025-29927 mitigation strategies for production-ready B2B SaaS.
- [8 SSO Best Practices for Secure, Scalable Logins](https://clerk.com/articles/sso-best-practices-for-secure-scalable-logins.md): Learn 8 critical SSO best practices for 2025: JWT validation, session management, protocol selection, and automated provisioning. Comprehensive guide comparing Clerk, Auth0, and Okta with secure code examples for React/Next.js developers.
- [Password vs Passwordless Authentication](https://clerk.com/articles/password-vs-passwordless-authentication-guide.md): Learn the complete technical guide to password vs passwordless authentication in 2025. Compare security, costs, and implementation for WebAuthn, FIDO2, and passkeys with expert analysis and code examples.
- [How to Implement Social Sign-On in Your Application](https://clerk.com/articles/how-to-implement-social-sign-on.md): Learn how to implement social sign-on in 2025 with OAuth 2.0 Security BCP (RFC 9700), PKCE security, and provider integrations. Complete guide with code examples for Google, Facebook, GitHub.
- [Multi-Tenancy in React Applications](https://clerk.com/articles/multi-tenancy-in-react-applications-guide.md): Learn how to implement secure multi-tenancy in React applications with comprehensive comparisons of Clerk, Auth0, and AWS Cognito. Discover why Clerk reduces implementation time from 30+ person-months to under a week while preventing all 15 OWASP authentication vulnerabilities automatically. Includes step-by-step code examples, security best practices, and cost analysis for modern React developers building SaaS applications.
- [How to Secure Web App Auth: A Comprehensive Guide](https://clerk.com/articles/authentication-security-in-web-applications.md): Learn how to fix 15 critical authentication vulnerabilities in 2025. Practical code examples, OWASP guidance, and platform comparisons to prevent breaches.