Releasesby GlyphNew Private Cloud Region in Thailand
Auth0's Private Cloud footprint is expanding again, this time to the AWS Asia Pacific __Thailand Region!__ This launch plants our secure identity infrastructure in the heart of one of Southeast Asia's largest digital economies. Customers in the region can now leverage this new presence for significantly reduced latency and enhanced performance.
Also shipped Nov 3, 2025Okta in November 2025 →
Workflows are now in Alpha and I already broke mine
PostHog introduced Workflows in alpha, an automation builder that triggers actions based on live user behavior and event data.
2.32.0 (2025-10-28)
Features Adds Python 3.14 support ( #1512 ) ( 95a2690 ) Debug logs ( #1460 ) ( b5d4a45 ) Support the protocol version in StreamingPullRequest ( #1455 ) ( e6294a1 ) Bug Fixes Ignore future warnings on python versions ( #1546 ) ( 8e28dea )
2.33.0 (2025-10-30)
Features Add AwsKinesisFailureReason.ApiViolationReason ( ac68093 ) Add tags to Subscription, Topic, and CreateSnapshotRequest messages for use in CreateSubscription, CreateTopic, and CreateSnapshot requests respectively ( ac68093 ) Annotate some resource fields with their corresponding API types ( ac68093 ) Bug Fixes Deprecate credentials_file argument (...
Deployment setup monitoring
Enterprise customers can now get notified when deployments fail to start and customize how long to wait before timing out.
WAF Release - 2025-11-03
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
More from Auth0Every Auth0 release →
Prompt for Organization Name Without SSO
Login flows initiated in the context of client applications associated with business users (`organization_usage=require`) and configured to prompt for the organization at the start of the login flow (`organization_require_behavior=pre_login_prompt`) will consider an existing authenticated session and allow single sign-on (SSO).
Google Workspace Inbound User Directory Sync Beta
We’re excited to introduce Google Workspace User Directory Sync, now available as part of our Beta program. This feature allows organizations to automatically synchronize users from their Google Workspace directory into Auth0 - ensuring user data stays accurate and up to date without relying on login events.
Organization Discovery by Domain now in Early Access!
We’re excited to announce __Organization Discovery by Domain__, a new capability that makes enterprise login smarter and more seamless. Together with __Prompt for Organizations__, it automatically identifies a user’s Organization before authentication, using either their email or organization name , eliminating the need for guessing, manual routing, or...
Ignore Duplicate Writes and Missing Deletes in Auth0 FGA
We've enhanced the [Auth0 FGA Write API](https://docs.fga.dev/api/service#/Relationship%20Tuples/Write) endpoint to help streamline imports and reduce errors. You can now use two new optional parameters: `on_duplicate: "ignore"`: This will gracefully skip any write operations for relationship tuples that already exist.
Add Session Metadata to Auth0 Sessions
As part of Continuous Session Protection, you can now attach custom key–value data to a user’s session using Actions or the Auth0 Management API. This allows enterprise customers to persist contextual data (such as device name, organization ID, or custom flags) throughout the session lifecycle.
New Sign in with Shop Social Connection
Auth0 now supports Sign in with Shop, a new social login integration designed for Shopify merchants. This feature allows merchants to offer customers a familiar authentication option using their existing Shop accounts.
Enhanced Signup Bot Detection for Stronger Security and Seamless User Experience
We’ve improved our **machine learning (ML) model for signup** to deliver stronger protection against automated account creation while keeping friction low for legitimate users. > **Note:** This update applies **only to the signup flow**. There are **no changes** to the ML models used for bot detection in login or password reset flows.
Upcoming Changes when using Non-Verifiable Callback URIs
To enhance security and mitigate risks of application impersonation and phishing attacks, we are **recommending the transition to HTTPS-based callbacks using [Android App Links](https://developer.android.com/training/app-links#android-app-links) and [Apple Universal...