Configure Clerk SSO

Create a Clerk OAuth application

Open the Clerk Dashboard OAuth applications page for the Clerk instance that will authenticate Coolify users.

Select Add OAuth application, enter a name such as Coolify, and include the email and profile scopes. Add openid only when another client needs OIDC; Coolify's Clerk integration requests email and profile.

Select Add.

See Clerk's OAuth application guide if the dashboard navigation differs.

Save the Clerk credentials

Copy the Client Secret from the creation modal and store it securely. Clerk does not show the complete secret again.

On the OAuth application's settings page, copy Client ID.

Register the Coolify redirect

In the Clerk OAuth application, add this value under Redirect URIs:

https://coolify.shadowarcanist.com/auth/clerk/callback

Save the application.

Use Clerk's user and organization controls to decide who may authenticate through the OAuth application.

Copy the Clerk Base URL

Open API Keys in the Clerk Dashboard and copy the instance's Frontend API URL. A development instance usually resembles:

https://shadowarcanist.clerk.accounts.dev

A production instance may use a custom Clerk domain. Use the origin shown by Clerk without /oauth/authorize, /oauth/token, or another path.

Configure Clerk in Coolify

Open Settings > OAuth and find Clerk.

Select Save, then turn on Enabled for Clerk.

Verify Clerk sign-in

Open the Coolify login page in a private browser window and select Login with Clerk. Complete Clerk authentication, then confirm that Coolify opens the account matching the primary Clerk email address.