Focus rings now keyboard-only; Security tab gated by permission; SSO overview condensed

Minor Changes

• Migrate from :focus to :focus-visible so focus rings only appear during keyboard navigation (#8595) by @alexcarpenter

• Improve UserButton and OrganizationSwitcher accessibility. The trigger button now announces itself as a dialog trigger (aria-haspopup="dialog") and the popover uses role="dialog" instead of role="menu". UserButton and OrganizationSwitcher popovers now receive focus when opened, and actions are logically grouped with labelled role="group" elements for screen readers. (#8325) by @alexcarpenter

Patch Changes

• Condense the OrganizationProfile Security page SSO overview to a single summary row (one-line description, domains as chips, status badge, actions under the overflow menu) and remove the now-unused ssoSection provider/sign-on URL/issuer/descriptionLine2 localization keys. (#8915) by @iagodahlem

• Updates development mode indicator styling. (#8917) by @alexcarpenter

• Add a generic FLOW_STEP_MOUNTED telemetry event (eventFlowStepMounted) for measuring multi-step flow funnels, and wire it into the self-serve SSO flow (#8951) by @LauraBeatris

• Add localization support for OAuth access denied errors. (#8786) by @wobsoriano

• Allow changing enterprise connection provider between self-serve SSO steps (#8881) by @LauraBeatris

• The Security tab in <OrganizationProfile /> is now hidden for members who lack the manage enterprise connections permission (org:sys_entconns:manage), instead of rendering a permission-denied state. This matches how the Members, Billing, and API keys tabs are gated. (#8971) by @iagodahlem

• Self-serve SSO: fix the configuration wizard rendering a blank step when a connection is reset from the first configuration step. Resetting now returns to the provider selection step. (#8970) by @iagodahlem

• Self-serve SSO: restore keyboard-accessible provider selection, mark configuration wizard steps complete based on connection state rather than position, and fix the organization Security page loading state. (#8940) by @iagodahlem

• Updated dependencies [c38d853, 7e3174a, 97039bb, f43071d, 0e0ff11, 0039618, a536a0d]:

  • @clerk/localizations@4.9.3
  • @clerk/shared@4.21.0