Clerk adds allowlisted email-code bypass for enterprise SSO

Clerk has introduced SSO bypass for enterprise connections, letting allowlisted users sign in with a one-time email code when an identity provider is down or the connection breaks; everyone else must continue using SSO. Only users with a verified email address on a domain served by the connection can be added. When an eligible user enters an email, the sign-in interface displays a “Can't use SSO?” option; after confirmation, Clerk emails a code and creates an ordinary session. Clerk does not check whether an allowlisted address still exists in the identity provider, and logs successful bypasses as sign_in.sso_bypass.succeeded events in Application Logs. The allowlist can be managed from the connection page in the Clerk Dashboard or through the Backend API. The feature is available on every instance with enterprise connections; setup requires enabling Email verification code sign-in and adding users to an allowlist.