---
title: "Clerk SAML connections accept multiple signing certificates and idp_certificate is deprecated: 2026-10-06 | Harbyn"
description: "Clerk SAML connections accept multiple signing certificates and idp_certificate is deprecated, announced Oct 6, 2026; replacement: idp_certificates."
canonical: "https://harbyn.com/changes/clerk/2026-10-06-multiple-signing-certificates-for-saml-connections"
last-updated: 2026-10-07
---

# Clerk SAML connections accept multiple signing certificates and idp\_certificate is deprecated

Markdown version of <https://harbyn.com/changes/clerk/2026-10-06-multiple-signing-certificates-for-saml-connections>.

Deprecation - Clerk. low severity. In effect.

SAML enterprise connections now trust up to five signing certificates, so an identity provider's next certificate can be added before key rotation. In the Backend API, pass the full list as idp\_certificates when creating or updating an enterprise connection; the single idp\_certificate field keeps working but is deprecated, with no removal date given.

## Facts

| Fact | Value |
| --- | --- |
| Vendor | [Clerk](https://harbyn.com/vendors/clerk.md) |
| Kind | Deprecation |
| Severity | low |
| Status | In effect |
| Announced | Oct 6, 2026 |
| Added to Harbyn | Oct 7, 2026 |
| Lead time | No dated deadline |
| Symbols | `idp_certificate` |
| Replacement | `idp_certificates` |
| Vendor page | <https://clerk.com/changelog/2026-10-02-multiple-saml-signing-certificates> |
| Review | Reviewed by a person, extracted by a model |

## Find it in your code

```sh
npx harbyn scan
```

This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses Clerk, from its packages and API hosts. Nothing leaves your machine.

## Sources

Where this event comes from: the page we read, when we read it, and the hash of that snapshot.

- <https://clerk.com/changelog/atom.xml> (changelog, fetched 2026-10-07 06:07 UTC, sha256 `9ed74bbda8e5bf5165ffdfa4ab512a38a05745559495d7f117df71c573c7f441`)

## Related changes

### More from Clerk

- [Expo native components move to their own package](https://harbyn.com/changes/clerk/2026-10-20-expo-native-components-move-to-their-own-package.md) (Breaking change, announced Oct 20, 2026)

### Changes at other vendors

- [AWS Lambda: Python 3.10 runtime deprecation](https://harbyn.com/changes/aws-lambda/2026-10-08-python-3-10-runtime-deprecation.md) (effective Oct 31, 2026)
- [Jira / Atlassian Cloud: Atlassian Analytics dashboard subscriptions being removed](https://harbyn.com/changes/atlassian-jira/2026-08-10-atlassian-analytics-dashboard-subscriptions-being-removed.md) (effective Nov 2, 2026)
- [Google Cloud Run and Functions: .NET 8 runtime deprecation](https://harbyn.com/changes/google-cloud/2026-10-08-net-8-runtime-deprecation.md) (effective Nov 10, 2026)
- [GitHub: X-GitHub-Stateless-S2S-Token header ignored from 2026-11-30](https://harbyn.com/changes/github/2026-10-02-x-github-stateless-s2s-token-header-ignored-from-2026-11-30.md) (effective Nov 30, 2026)

[All upcoming deadlines](https://harbyn.com/deadlines.md)