Releasesby GlyphExpress Configuration is now Generally Available for Auth0 SaaS apps in the Okta Integration Network
We’re pleased to announce that Express Configuration with Okta is now generally available for Auth0 applications in the [Okta Integration Network](https://www.okta.com/integrations/)! Express Configuration automates how your enterprise customers using Okta set up identity integrations with your Auth0 application.
Also shipped Nov 24, 2025Okta in November 2025 →
Convex Vercel Marketplace Integration
Convex is now available for deployment via the Vercel Marketplace, enabling one-click installation for Vercel customers.
WAF Release - 2025-11-24
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in FortiWeb, linked to CVE-2025-64446, alongside new detection logic expanding protection against PHP Wrapper Injection techniques. Key Findings This vulnerability enables an unauthenticated attacker to bypass access controls by abusing the CGIINFO header.
Debug Guides and Surveys with the Amp Chrome Extension
Description: • Quick access to verify SDK Setup • Troubleshoot guides and surveys or Preview one directly • View user properties • View all forwarded events or send a test event to trigger a g/s Why: Knowing and running JS console commands is a hurdle for customers who need visibility into G/S setup.
We now support Predicted Outputs for faster generation when large portions of the output are known in advance
We now support Predicted Outputs for faster generation when large portions of the output are known in advance. Provide a draft of the expected response via the prediction field, and the model will efficiently reuse unchanged tokens while regenerating only those that differ. Ideal for code editing, document revisions, and template-based responses.
Nova-3 Model Update
🎯 Nova-3 supports 10 new languages We've added support for 10 new languages with non-English monolingual Nova-3 models. This continues our effort to significantly expand Nova-3 language support beyond English.
Radar - Cloud Services Observability in Cloudflare Radar
Radar introduces HTTP Origins insights, providing visibility into the status of traffic between Cloudflare's global network and cloud-based origin infrastructure. The new Origins API provides provides the following endpoints: /origins - Lists all origins (cloud providers and associated regions).
More from Auth0Every Auth0 release →
Auth0 for AI Agents is generally available
We are thrilled to announce a major milestone: the General Availability (GA) of **Auth0 for AI Agents!** [Auth0 for AI Agents](https://auth0.com/ai) is a suite of features to empower developers to build secure agentic applications and experiences.
Security Center Threat Behavior Metrics Update
We’ve refined the logic behind how Security Center metrics are calculated to provide more accurate and actionable insights. Metrics now reflect IP activity using the following logic: When an IP address triggers more than 10 relevant events for a given metric within a single hour, it will now be counted toward that metric.
Auth for MCP: Now in Early Access
Auth0 is thrilled to announce that __Auth for MCP__ is officially in Early Access! This release extends the power of Auth0’s standards-based authorization platform to the Model Context Protocol (MCP), securing your MCP servers, MCP clients, AI agents and the APIs they interact with.
Adaptive MFA: Customizable Device Remembrance
**Adaptive MFA** now allows administrators to configure **device remembrance durations (TTL)** for the **New Device assessor**. The **default remains at 30 days**, but can now be customized to any value between **1–365 days**. When users log in successfully on a remembered device, that device’s TTL automatically refreshes to the currently configured value.
Introducing the New ASP.NET Core API SDK
We are excited to announce the release of __Auth0.Aspnetcore.Authentication.Api__, a new official SDK designed to streamline authentication and security for ASP.NET Core backend applications. __Key Benefits:__ __Supports .NET 8.0+__ and built for the modern "middleware" pattern.
Exciting Enhancements Now Live in Multiple Custom Domains (MCD) Early Access
We are thrilled to announce a significant expansion of capabilities within the Multiple Custom Domains (MCD) Early Access program for Enterprise customers. This update delivers powerful branding and white-labeling capabilities with improved flexibility to scale your identity solution from a single Auth0 tenant.
New Dynamic Client Registration (DCR) Scope Added to Tenant ACL
Auth0 has added a __Dynamic Client Registration (DCR)__ scope to the __Tenant Access Control List (ACL)__. This enhancement allows administrators to control access to the /oidc/register endpoint based on a variety of network and client signals, helping prevent unauthorized or automated client creation. Configuration is available via the __Management API__.
New Management API endpoints to configure Bot Detection settings
Auth0 now provides Management API endpoints to manage Bot Detection configuration! __Key Capabilities:__ __Bot Detection Controls:__ Automate adjustments to the Bot Detection Level (low, medium, or high) and manage your trusted IP AllowList via API.