Releasesby GlyphAdaptive MFA: Customizable Device Remembrance
**Adaptive MFA** now allows administrators to configure **device remembrance durations (TTL)** for the **New Device assessor**. The **default remains at 30 days**, but can now be customized to any value between **1–365 days**. When users log in successfully on a remembered device, that device’s TTL automatically refreshes to the currently configured value.
Also shipped Dec 4, 2025Okta in December 2025 →
Adding Async Streaming to Postgres Foreign Data Wrappers
Supabase Wrappers now supports asynchronous streaming for Postgres Foreign Data Wrappers, improving performance for large analytical workloads.
Build "Sign in with Your App" using Supabase Auth
Supabase Auth now functions as an identity provider, supporting OAuth 2.1 and OpenID Connect to enable SSO for AI agents and third-party applications.
Critical Security Vulnerability in React Server Components
A critical security vulnerability was identified in React Server Components affecting specific versions of react-server-dom and Next.js.
Introducing the Batch API: Simpler and more efficient for large-scale workloads
The new Batch API is an asynchronous endpoint for processing large volumes of requests. It offers higher throughput, a 12-hour completion window, and 33% cost savings compared to synchronous alternatives.
Workers - One-click Access protection for Workers now creates reusable Cloudflare Access policies
Workers applications now use reusable Cloudflare Access policies to reduce duplication and simplify access management across multiple Workers. Previously, enabling Cloudflare Access on a Worker created per-application policies, unique to each application.
- Transient storage filter in Settings: The Databases page in Settings in the MotherDuck UI now supports...
- Transient storage filter in Settings: The Databases page in Settings in the MotherDuck UI now supports filtering by storage type DESCRIBE and SUMMARIZE exports: Downloading the results of DESCRIBE and SUMMARIZE queries is now supported in the MotherDuck UI DuckLake option in the Add Database menu: MotherDuck users can create a new DuckLake in the 'Add...
More from Auth0Every Auth0 release →
Introducing the New ASP.NET Core API SDK
We are excited to announce the release of __Auth0.Aspnetcore.Authentication.Api__, a new official SDK designed to streamline authentication and security for ASP.NET Core backend applications. __Key Benefits:__ __Supports .NET 8.0+__ and built for the modern "middleware" pattern.
Google Workspace User Directory Sync - Now in Early Access
We’re excited to announce that Google Workspace User Directory Sync is now available in Limited Early Access (EA) with major enhancements to configuration, usability, and performance.
Requesting App for Cross App Access (XAA) is now available in Beta
This new Token Vault capability allows Client Applications to obtain access tokens from third-party APIs (resource servers), through an authorization flow that is coordinated by a common Identity Provider implementing the [Identity Assertion Authorisation Grant](https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/) standard.
Advanced Customizations for Universal Login has reached General Availability
We are excited to announce that __Advanced Customizations for Universal Login (ACUL)__ is now generally available. ACUL enables developers to create custom, client-rendered user interfaces for Universal Login using their preferred frontend technologies.
Express Configuration is now Generally Available for Auth0 SaaS apps in the Okta Integration Network
We’re pleased to announce that Express Configuration with Okta is now generally available for Auth0 applications in the [Okta Integration Network](https://www.okta.com/integrations/)! Express Configuration automates how your enterprise customers using Okta set up identity integrations with your Auth0 application.
Deprecation of Weak TLS 1.2 Cipher Suites
To ensure the highest security standards for your identity infrastructure, we are retiring specific weak TLS 1.2 cipher suites. This change affects all connections to Auth0 service endpoints and web applications, specifically: __Tenant Domains__: All default (e.g., [tenant].auth0.com) and Custom Domains for both Public and Private Cloud.
MyAccount API Explorer Experience Updated
The MyAccount API Explorer now has an updated experience! Using MyAccount API, customers can build self-service management experiences at scale, powered directly from their applications. To learn more about the MyAccount API feature, [click here](https://auth0.com/docs/manage-users/my-account-api).
Forms - Flows Auth0 Send Email Action
We’re excited to announce that we added __Flows Auth0 Send Email Action__! This new feature allows you to send emails from Flows using the customized Email Provider at your Auth0 Tenant.