clerk.create_enterprise_connection
Create a SAML or OIDC enterprise SSO connection in a connected Clerk application.
Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account.
Returns the new enterprise_connection summary.
Cost = 10 tokens.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Display name for the enterprise connection. | |
| oidc | No | OIDC client configuration when provider uses OAuth. | |
| saml | No | SAML IdP configuration when provider uses SAML. | |
| active | No | Whether the connection is active. | |
| domains | Yes | Email domains that may use this connection. | |
| provider | Yes | Identity provider key (for example saml_custom or oidc_custom). | |
| organization_id | No | Clerk organization id (org_...) to link to this connection. | |
| clerk_instance_id | No | Clerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account. | |
| custom_attributes | No | Custom attribute mappings from the IdP to user metadata. | |
| sync_user_attributes | No | Whether to sync user attributes on each sign-in. | |
| allow_organization_account_linking | No | Whether account linking via organization membership is allowed. | |
| disable_additional_identifications | No | Whether to block additional identifications for this connection. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| enterprise_connection | No | Newly created enterprise SSO connection. |