⟳ Updates Hub
A
Home / Identity

Auth0

Website ↗ RSS 153 items Fetched 37m ago
A
Auth0 Identity

added Multi-Factor Authentication: Exponential Backoff for Phone MFA SMS Delivery SMS Frau

added Multi-Factor Authentication: Exponential Backoff for Phone MFA SMS Delivery SMS Fraud Protection with Exponential Backoff Auth0 now supports SMS Fraud Protection with Exponential Backoff for Phone Multi-Factor Authentication (MFA) SMS delivery on Enterprise plans. This feature helps mitigate SMS pumping and toll fraud across outbound phone verification flows. Why It Matters SMS toll fraud oc…

A
Auth0 Identity

added HTTP Message Signatures Added to Tenant Network ACLs Auth0 Tenant Network ACLs now s

added HTTP Message Signatures Added to Tenant Network ACLs Auth0 Tenant Network ACLs now support RFC 9421 HTTP Message Signatures via the Management API, providing cryptographic origin verification to prevent direct tenant bypass. What’s New Enterprise tenants can enforce HMAC-SHA256 request verification directly at the Auth0 network boundary: Origin Verification: Validates that incoming requests…

A
Auth0 Identity

Version 202644added Introducing Universal Portals - Developer Preview We're excited to ann

Version 202644added Introducing Universal Portals - Developer Preview We're excited to announce that Universal Portals is now in Developer Preview! Universal Portals are hosted, self-service portals where end users manage their own accounts and organization administrators manage their own organizations, without you building, hosting, or maintaining the interface. You build each portal from pre-bui…

A
Auth0 Identity

Version 202643added Identity Conversion Suite is now in Early Access Identity Conversion S

Version 202643added Identity Conversion Suite is now in Early Access Identity Conversion Suite brings Anonymous Sessions and Experiment Center together in Early Access. Anonymous Sessions helps applications maintain session context before a visitor signs up or logs in. Experiment Center lets teams A/B test login experiences and review results in metrics dashboards. The suite is a paid add-on for E…

A
Auth0 Identity

added CIMD with Dynamic Registration in Early Access Auth0 now supports CIMD with dynamic

added CIMD with Dynamic Registration in Early Access Auth0 now supports CIMD with dynamic registration in Early Access. MCP clients and AI agents can connect to your tenant without an administrator registering each one first. With Client ID Metadata Document (CIMD), a client identifies itself with an HTTPS URL that points to a metadata document: its name, redirect URIs, and supported authenticatio…

A
Auth0 Identity

updated Application Profiles are available in Early Access We are excited to announce that

updated Application Profiles are available in Early Access We are excited to announce that application profiles are now available in Early Access. This feature allows you to manage third party applications created and used by AI agents, as well as centralizing management of large numbers of applications in a single configuration point. What's included in the Early Access: The Application Profiles…

A
Auth0 Identity

added Configurable Unblock Mode for Brute Force Protection We’ve added a new Unblock Behav

added Configurable Unblock Mode for Brute Force Protection We’ve added a new Unblock Behavior setting to Brute-Force Protection for better compatibility with email scanners. What Changed? When an account is locked due to brute-force protection, users receive an email containing a recovery link. You can now choose how opening that link is handled: Automatic (Default): The account is unblocked immed…

A
Auth0 Identity

added Agent Mode for the Auth0 CLI Agents are increasingly operating the CLI to configure

added Agent Mode for the Auth0 CLI Agents are increasingly operating the CLI to configure Auth0 on behalf of developers. The CLI wasn't built for that. A misspelled command could exit 0 like nothing went wrong. A routine re-login could hang forever waiting on a browser click that would never come. Finding the right command meant drilling through --help one level at a time. Key Highlights: One swit…

A
Auth0 Identity

updated Improved Bot Detection: Enhanced IPv6 Signal Analysis Bot Detection Model Update W

updated Improved Bot Detection: Enhanced IPv6 Signal Analysis Bot Detection Model Update We have updated our Bot Detection model to improve threat intelligence against fast-rotating distributed bot networks while preserving a seamless user experience. Key Improvements Expanded Distributed Defense Expanded signal analysis across fast-rotating IPv6 address ranges commonly exploited by distributed bo…

A
Auth0 Identity

Version 202637updated Universal Login identifier and phone country controls in Early Acces

Version 202637updated Universal Login identifier and phone country controls in Early Access Universal Login's identifier and phone country controls are available in Early Access on all Auth0 plans. Choose type-specific login entry with "Continue with" buttons, or keep the default unified field. The updated phone entry UI for login and signup includes country selection, regional formatting, and a n…

A
Auth0 Identity

added Tenant ACL Dashboard UX Easily construct, sequence, and audit Tenant Access Control

added Tenant ACL Dashboard UX Easily construct, sequence, and audit Tenant Access Control List (ACL) rules using our new intuitive, step-by-step dashboard interface . Features Guided Rule Builder Construct complex Tenant ACL policies directly under Security > Access Control using step-by-step input prompts that simplify scope, entity, and action selection without syntax errors. Visual Rule Sequenc…

A
Auth0 Identity

Version 202641added Actions - Access Token Scope Customization - GA We are excited to anno

Version 202641added Actions - Access Token Scope Customization - GA We are excited to announce that Access Token Scope Customization for Actions is now Generally Available, and with this release we are extending support to Post Login Actions. Credentials Exchange Actions, which had these interfaces in Early Access, are now GA as well. These interfaces let you customize which scopes are considered…

A
Auth0 Identity

changed Upcoming changes to the length of refresh tokens As part of our commitment to main

changed Upcoming changes to the length of refresh tokens As part of our commitment to maintaining the highest security and compliance standards, we will soon be updating our authentication service configuration to increase the length and entropy of our refresh tokens. What is changing? We are increasing the cryptographic entropy of our issued Refresh Tokens. As a result, the string length of newly…

A
Auth0 Identity

added FGA Permissions Index is in Early Access The FGA Permissions Index is graduating fro

added FGA Permissions Index is in Early Access The FGA Permissions Index is graduating from Developer Preview to Early Access. The FGA Permissions Index precompute permissions for instant verification of what users can access. You can now build, monitor, and manage your indexes self-service inside the FGA Dashboard. Every FGA Enterprise subscription automatically includes complimentary access to o…

A
Auth0 Identity

Version 202609updated Actions - Modules - GA We are excited to announce that Actions Modul

Version 202609updated Actions - Modules - GA We are excited to announce that Actions Modules is now available in General Availability. This feature allows you to create, manage, and share reusable code across different Actions within your Auth0 Tenant. Key Highlights Simplified Code Management: Reduce code duplication and improve organization by writing common logic once and importing it into any…

A
Auth0 Identity

Version 202638added Custom User ID Assignment with Actions — Early Access You can now assi

Version 202638added Custom User ID Assignment with Actions — Early Access You can now assign a custom user_id to new database-connection users at signup by calling the api.user.setUserId() method in a pre-user-registration Action. Previously, Auth0 automatically generated user IDs in the standard auth0| format for new signups. Customers who needed custom or legacy-compatible IDs had to build self-…

A
Auth0 Identity

added My Organization API and Embeddable UI Components - Member Management in Early Access

added My Organization API and Embeddable UI Components - Member Management in Early Access! We are excited to announce the Early Access (EA) release of Member Management for the My Organization API and Embeddable UI Components. Building on the Organization Details and Identity Provider Management foundation, this release gives B2B SaaS developers everything they need to let organization administra…

A
Auth0 Identity

Version 202638added B2B Connect - Enterprise in Early Access! You can now connect your exi

Version 202638added B2B Connect - Enterprise in Early Access! You can now connect your existing authorization server to Auth0 for enterprise SSO, SCIM provisioning, and multi-tenant org management — without migrating your users. What's new B2B Connect Beta let you layer Auth0 enterprise identity on top of your own authorization server. Early Access adds real-time visibility into enterprise directo…

A
Auth0 Identity

Version 202638added Enterprise Connection Events — Early Access You can now stream real-ti

Version 202638added Enterprise Connection Events — Early Access You can now stream real-time notifications when an enterprise connection changes — without polling the Management API. What's new Previously, detecting changes to an enterprise connection (a new SSO connection added, an existing one updated, or one removed) required polling the Management API on a schedule. With connection events, Aut…

A
Auth0 Identity

added New Deny All Rule for Tenant ACL You can now configure a Deny All rule within your T

added New Deny All Rule for Tenant ACL You can now configure a Deny All rule within your Tenant Access Control List (ACL) to reject all incoming traffic to your assigned scope. By utilizing the new match_all: true attribute, this rule bypasses specific signal matching (such as IP or geolocation) to apply comprehensive protection across the full tenant scope. When assigned a high priority value, it…

A
Auth0 Identity

Version 202637added My Organization API and Embeddable UI Components - XAA and third-party

Version 202637added My Organization API and Embeddable UI Components - XAA and third-party app access configuration in Early Acces We're excited to announce that self-service configuration of Third-Party Application Access and Cross App Access (XAA) is now available through the My Organization API and Embeddable UI Components, in Open Early Access. This capability is available to all customers - c…

A
Auth0 Identity

Version 202636added My Organization API and Embeddable UI Components - XAA and third-party

Version 202636added My Organization API and Embeddable UI Components - XAA and third-party app access configuration in Early Acces We're excited to announce that self-service configuration of Third-Party Application Access and Cross App Access (XAA) is now available through the My Organization API and Embeddable UI Components, in Open Early Access. This capability is available to all customers - c…

A
Auth0 Identity

updated Dashboard Navigation & IA Refresh is now in Early Access We're excited to announce

updated Dashboard Navigation & IA Refresh is now in Early Access We're excited to announce that the Dashboard Navigation & IA Refresh is now available in Early Access, bringing a redesigned sidebar, improved information architecture, consistent, breadcrumbs, and a modernized visual experience to the Auth0 Dashboard. How to Enable The new navigation is available as an opt-in feature per user accoun…

A
Auth0 Identity

Version 202634added Advanced MFA Configurations are now Generally Available We are happy t

Version 202634added Advanced MFA Configurations are now Generally Available We are happy to announce that Advanced MFA Configurations are now Generally Available! This is a highly awaited capability that allows customers to completely tailor their user's MFA Journeys to their security and UX needs With Advanced MFA Configurations you can: Change the period that we will "Remember this device" for M…

A
Auth0 Identity

added Cross-App Access Requesting App now in Early Access We're excited to announce that A

added Cross-App Access Requesting App now in Early Access We're excited to announce that Auth0 now supports acting as a requesting application in Cross-App Access flows in Early Access. Today, every user has to click "Connect your account" for every integration, in every app, one at a time. For AI agents, assistants, and ISVs onboarding enterprise customers, that's friction on every new integratio…

A
Auth0 Identity

added Cross-App Access Requesting App now in Early Access We're excited to announce that A

added Cross-App Access Requesting App now in Early Access We're excited to announce that Auth0 now supports acting as a requesting application in Cross-App Access flows in Early Access. Today, every user has to click "Connect your account" for every integration, in every app, one at a time. For AI agents, assistants, and ISVs onboarding enterprise customers, that's friction on every new integratio…

A
Auth0 Identity

Version 202637added Custom Token Exchange is now Generally Available We are excited to ann

Version 202637added Custom Token Exchange is now Generally Available We are excited to announce that Custom Token Exchange is now Generally Available. This feature is available to all Enterprise, B2B Professional, and B2C Professional customers, as well as part of the Trial period for free tenants. Custom Token Exchange lets your application exchange an existing token — issued by Auth0, or by an e…

A
Auth0 Identity

Version 202634added Custom Token Exchange is now Generally Available We are excited to ann

Version 202634added Custom Token Exchange is now Generally Available We are excited to announce that Custom Token Exchange is now Generally Available. This feature is available to all Enterprise, B2B Professional, and B2C Professional customers, as well as part of the Trial period for free tenants. Custom Token Exchange lets your application exchange an existing token — issued by Auth0, or by an e…

A
Auth0 Identity

Version 202627added Custom Rate Limits available in Early Access Custom Rate Limits allow

Version 202627added Custom Rate Limits available in Early Access Custom Rate Limits allow Auth0 Customers to limit the amount of RPS their first-party, third-party, or CIMD apps can consume, so as to mitigate the risk that any one Client can exhaust the customer’s Tenant Rate Limit Entitlement on their tenant’s Authentication API Rate Limit Policy. Key Early Access Features: API-based self service…

A
Auth0 Identity

Version 202627added Custom Rate Limits available in Early AccessCopied to clipboard Custom

Version 202627added Custom Rate Limits available in Early AccessCopied to clipboard Custom Rate Limits allow Auth0 Customers to limit the amount of RPS their first-party, third-party, or CIMD apps can consume, so as to mitigate the risk that any one Client can exhaust the customer’s Tenant Rate Limit Entitlement on their tenant’s Authentication API Rate Limit Policy. Key Early Access Features: API…