Clerk Organizations let you build authentication, user management, and billing into your B2B SaaS applications without needing to manage complex backend logic or glue code. You can build B2B apps that support teams or company accounts with full organization-level features like multi-tenancy, roles, permissions, and billing. The best part? Clerk lets you support both personal and organization accounts in the same app, so you can offer solo and team plans or workspaces side by side. We provide prebuilt components like <CreateOrganization />, <OrganizationProfile />, <OrganizationList />, and <OrganizationSwitcher /> that you can easily drop into your code to allow users and admins switch between their personal and organization account(s), manage their org’s profile, admin settings, invitations, and even existing members. If you have custom needs that require more control, you can use our APIs to tailor all Organization flows to your specific use case. See custom flows for more information.

We've designed Clerk Organizations to cater to the common use cases you'll encounter when building for B2B—from multi-tenant authentication use cases like org-specific, isolated tenants to enterprise SSO options like SAML, to role-based access control (RBAC).

Clerk gives you a multi-tenant data model that maintains a hierarchical relationship between three core entities: organizations, members, and roles. Each organization has its own settings, roles, and members, while users can belong to multiple organizations with a single account. In cases when a user belongs to more than one organization, your app gets access to the active organization’s ID, metadata, and role context—so you can isolate data, enforce permissions, and structure your UI accordingly.

Clerk supports enterprise SSO protocols like SAML and even OIDC, meaning members can authenticate into organizations using their IdP-provisioned credentials from identity providers like Okta, Entra ID, and Google Workspace. We support role-based access control (RBAC) with default and custom roles for granular, tenant-specific permissions, alongside multi-factor authentication (MFA) using OTPs, TOTPs, passkeys, or biometrics to enforce secure access. With Verified Domains, you can restrict membership to specific email domains and enforce custom branding to streamline invitations and onboarding.

Clerk supports both multi-org discovery and org-specific authentication by default. With <OrganizationSwitcher />, your users can sign in and seamlessly switch between all the organizations they belong to without any auth or data leakage between tenants. For org-specific authentication flows, Verified Domains let you restrict access to users with approved email domains (e.g., @company.com), automatically suggest relevant organizations during sign-up, and allow users to request to join or be automatically added to an organization based on their email. You can also use organization slugs (e.g., /acme) to route users to org-specific authZ flows/pages. Combined with support for SAML and other enterprise connections, these features make it easy to build smooth, secure discovery and onboarding experiences for B2B use cases.

Clerk supports two default roles: admin and member. Roles and permissions are embedded directly in the session, so you don't need extra network requests for authorization checks in your frontend or backend. You can configure membership settings, invitations, and role assignments with <OrganizationProfile /> or Clerk's APIs. With the B2B Authentication Add-on, you can create custom roles and permissions for granular authorization, plus role sets (collections of available roles) for managing RBAC across subscription tiers and customer cohorts.

Yes. Invited users can sign up or sign in using magic links, passkeys, OTP, OAuth, or SSO, depending on your configured auth methods.

Clerk Organizations integrates directly with Clerk Billing to manage subscriptions for SaaS apps without you having to write any custom payment logic. Using our <PricingTable /> component, you can display pricing plans on your app's pricing page, enabling members and teams to subscribe instantly, with Clerk handling the entire subscription lifecycle, including plan upgrades, downgrades, and feature gating. You can gate features by plan using the has() method or <Protect /> component, so only subscribed members can access certain functionality. Clerk connects directly to your Stripe business account to sync users, payment methods, and transactions, and charges 0.7% per transaction (exclusive of your standard Stripe fees).

Clerk's B2B/B2C SaaS features are available on all plans, with optional advanced features offered through the B2B Authentication Add-on. The Free plan includes 100 monthly retained organizations (MROs) with up to 20 members per organization, and supports invitation flows and basic roles. The B2B Authentication Add-on costs $1 per MRO, with your first 100 MROs free, and supports unlimited members per organization.