feat(ui): Self-serve SSO within OrganizationProfile

[LauraBeatris]

Description

Introduces "Single Sign-On" section in OrganizationProfile, if self-serve SSO is enabled for the organization

Checklist

• pnpm test runs as expected.
• pnpm build runs as expected.
• (If applicable) JSDoc comments have been added or updated for any package exports
• (If applicable) Documentation has been updated

Type of change

• 🐛 Bug fix
• 🌟 New feature
• 🔨 Breaking change
• 📖 Refactoring / dependency upgrade / documentation
• other:

[changeset-bot]

🦋 Changeset detected

Latest commit: 6e345b0

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 20 packages

Name	Type
@clerk/localizations	Minor
@clerk/clerk-js	Minor
@clerk/shared	Minor
@clerk/ui	Minor
@clerk/react	Patch
@clerk/chrome-extension	Patch
@clerk/expo	Patch
@clerk/astro	Patch
@clerk/backend	Patch
@clerk/expo-passkeys	Patch
@clerk/express	Patch
@clerk/fastify	Patch
@clerk/hono	Patch
@clerk/msw	Patch
@clerk/nextjs	Patch
@clerk/nuxt	Patch
@clerk/react-router	Patch
@clerk/tanstack-react-start	Patch
@clerk/testing	Patch
@clerk/vue	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 25, 2026 9:14pm

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8600

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8600

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8600

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8600

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8600

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8600

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8600

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8600

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8600

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8600

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8600

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8600

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8600

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8600

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8600

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8600

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8600

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8600

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8600

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8600

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8600

commit: 6e345b0

[coderabbitai]

Actionable comments posted: 1

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

packages/ui/src/components/ConfigureSSO/__tests__/ConfigureSSO.test.tsx (1)

32-51: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Test fixture uses outdated permission key.

The test fixture at line 39 uses org:sys_enterprise_connections:manage but the implementation in ConfigureSSOProtect now checks for org:sys_entconns:manage. This test passes coincidentally because it grants permissions the component no longer checks for, meaning it doesn't validate the actual authorization logic.

🐛 Proposed fix to use the correct permission key

 organization_memberships: [{ name: 'Org1', permissions: ['org:sys_enterprise_connections:manage'] }],
+ organization_memberships: [{ name: 'Org1', permissions: ['org:sys_entconns:manage'] }],

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/ui/src/components/ConfigureSSO/__tests__/ConfigureSSO.test.tsx`
around lines 32 - 51, The test grants the old permission key so it doesn't
validate the component's current check; update the permission string in the
fixture used by ConfigureSSO.test.tsx from
"org:sys_enterprise_connections:manage" to the current key
"org:sys_entconns:manage" (the user object created in the createFixtures call /
organization_memberships array) so ConfigureSSO/ConfigureSSOProtect's permission
check is exercised correctly.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In
`@packages/ui/src/components/OrganizationProfile/OrganizationProfileRoutes.tsx`:
- Around line 153-161: The lazy-loaded OrganizationSelfServeSSOPage is rendered
without a Suspense boundary; wrap its usage inside a React.Suspense with an
appropriate fallback (matching other routes like
OrganizationBillingPage/OrganizationAPIKeysPage) so the lazy import can load
without throwing; update the JSX in OrganizationProfileRoutes where
OrganizationSelfServeSSOPage is rendered (the Route/Route index block) to
include a Suspense wrapper around <OrganizationSelfServeSSOPage />.
---
Outside diff comments:
In `@packages/ui/src/components/ConfigureSSO/__tests__/ConfigureSSO.test.tsx`:
- Around line 32-51: The test grants the old permission key so it doesn't
validate the component's current check; update the permission string in the
fixture used by ConfigureSSO.test.tsx from
"org:sys_enterprise_connections:manage" to the current key
"org:sys_entconns:manage" (the user object created in the createFixtures call /
organization_memberships array) so ConfigureSSO/ConfigureSSOProtect's permission
check is exercised correctly.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 530d621d-2e90-4427-ae47-e3508d7ee3f1

📥 Commits

Reviewing files that changed from the base of the PR and between 384aab2 and 07abb56.

⛔ Files ignored due to path filters (1)

• packages/ui/src/icons/connections.svg is excluded by !**/*.svg

📒 Files selected for processing (16)

• packages/clerk-js/src/core/resources/Organization.ts
• packages/clerk-js/src/core/resources/__tests__/Organization.test.ts
• packages/localizations/src/en-US.ts
• packages/shared/src/types/json.ts
• packages/shared/src/types/localization.ts
• packages/shared/src/types/organization.ts
• packages/ui/src/components/ConfigureSSO/ConfigureSSO.tsx
• packages/ui/src/components/ConfigureSSO/__tests__/ConfigureSSO.test.tsx
• packages/ui/src/components/OrganizationProfile/OrganizationProfileRoutes.tsx
• packages/ui/src/components/OrganizationProfile/OrganizationSelfServeSSOPage.tsx
• packages/ui/src/components/OrganizationProfile/__tests__/OrganizationProfile.test.tsx
• packages/ui/src/constants.ts
• packages/ui/src/contexts/components/OrganizationProfile.ts
• packages/ui/src/icons/index.ts
• packages/ui/src/test/fixture-helpers.ts
• packages/ui/src/utils/createCustomPages.tsx

✅ Files skipped from review due to trivial changes (1)

• packages/ui/src/test/fixture-helpers.ts