Releasesby GlyphEnhanced Signup Bot Detection for Stronger Security and Seamless User Experience
We’ve improved our **machine learning (ML) model for signup** to deliver stronger protection against automated account creation while keeping friction low for legitimate users. > **Note:** This update applies **only to the signup flow**. There are **no changes** to the ML models used for bot detection in login or password reset flows.
Also shipped Oct 28, 2025Okta in October 2025 →
Access private hostname applications support all ports/protocols
Cloudflare Access for private hostname applications can now secure traffic on all ports and protocols. Previously, applying Zero Trust policies to private applications required the application to use HTTPS on port 443 and support Server Name Indicator (SNI). This update removes that limitation.
Tailscale Services
- New: Use Tailscale Services to decouple applications and services from the devices that host them ( beta ).
Export dashboards as images
Sharing your Grafana dashboards just got easier. You can now export any dashboard as a PNG image. Use the Export as image option to generate an image: A preview of the image is displayed. Click Download image : Using dashboard images, you can quickly send data to your team in chat, added to a presentation, or attached to an email.
AI Search - Reranking and API-based system prompt configuration in AI Search
AI Search now supports reranking for improved retrieval quality and allows you to set the system prompt directly in your API requests. Rerank for more relevant results You can now enable reranking to reorder retrieved documents based on their semantic relevance to the user’s query.
CASB introduces new granular roles
Cloudflare CASB (Cloud Access Security Broker) now supports two new granular roles to provide more precise access control for your security teams: Cloudflare CASB Read: Provides read-only access to view CASB findings and dashboards.
Gateway - New Application Categories added for HTTP Traffic Management
To give you precision and flexibility while creating policies to block unwanted traffic, we are introducing new, more granular application categories in the Gateway product.
More from Auth0Every Auth0 release →
Upcoming Changes when using Non-Verifiable Callback URIs
To enhance security and mitigate risks of application impersonation and phishing attacks, we are **recommending the transition to HTTPS-based callbacks using [Android App Links](https://developer.android.com/training/app-links#android-app-links) and [Apple Universal...
New Sign in with Shop Social Connection
Auth0 now supports Sign in with Shop, a new social login integration designed for Shopify merchants. This feature allows merchants to offer customers a familiar authentication option using their existing Shop accounts.
Auth0 Events Catalog Explorer Now Available
As part of the [Early Access launch of Event Streams](https://auth0.com/changelog#4SmjmcbmVZgt1Zsn7JYF1V), there is now an Events Catalog explorer available in Auth0 Docs to better guide you on the details of each Event -- including examples. The Event Streams feature allows you to discover completed changes to Auth0 Users and Organizations as they happen.
Organization Discovery by Domain now in Early Access!
We’re excited to announce __Organization Discovery by Domain__, a new capability that makes enterprise login smarter and more seamless. Together with __Prompt for Organizations__, it automatically identifies a user’s Organization before authentication, using either their email or organization name , eliminating the need for guessing, manual routing, or...
Ignore Duplicate Writes and Missing Deletes in Auth0 FGA
We've enhanced the [Auth0 FGA Write API](https://docs.fga.dev/api/service#/Relationship%20Tuples/Write) endpoint to help streamline imports and reduce errors. You can now use two new optional parameters: `on_duplicate: "ignore"`: This will gracefully skip any write operations for relationship tuples that already exist.
Prompt for Organization Name Without SSO
Login flows initiated in the context of client applications associated with business users (`organization_usage=require`) and configured to prompt for the organization at the start of the login flow (`organization_require_behavior=pre_login_prompt`) will consider an existing authenticated session and allow single sign-on (SSO).
New Private Cloud Region in Thailand
Auth0's Private Cloud footprint is expanding again, this time to the AWS Asia Pacific __Thailand Region!__ This launch plants our secure identity infrastructure in the heart of one of Southeast Asia's largest digital economies. Customers in the region can now leverage this new presence for significantly reduced latency and enhanced performance.
Google Workspace Inbound User Directory Sync Beta
We’re excited to introduce Google Workspace User Directory Sync, now available as part of our Beta program. This feature allows organizations to automatically synchronize users from their Google Workspace directory into Auth0 - ensuring user data stays accurate and up to date without relying on login events.