Releasesby GlyphForms - HTTP Vault Connection New Options
We’re excited to announce that we added new options for __Forms HTTP Vault Connections__! This new set of options allows you to configure different authorization methods for your HTTP Request Flow Actions.
Also shipped Mar 4, 2026Okta in March 2026 →
Gateway Authorization Proxy and hosted PAC files (open beta)
The Gateway Authorization Proxy and PAC file hosting are now in open beta for all plan types. Previously, proxy endpoints relied on static source IP addresses to authorize traffic, providing no user-level identity in logs or policies.
Introducing Expo Observe (Private Preview)
Joint the waitlist to test Expo Observe: our new Observability product to help you see how your app is performing in the real world.
Browser Run - Browser Rendering: 3x higher REST API request rate
Browser Rendering REST API rate limits for Workers Paid plans have been increased from 3 requests per second (180/min) to 10 requests per second (600/min) . No action is needed to benefit from the higher limit. The REST API lets you perform common browser tasks with a single API call, and you can now do it at a higher rate.
Cloudflare One, Access - User risk score selector in Access policies
You can now use user risk scores in your Access policies . The new User Risk Score selector allows you to create Access policies that respond to user behavior patterns detected by Cloudflare's risk scoring system, including impossible travel, high DLP policy matches, and more. For more information, refer to Use risk scores in Access policies .
Workers AI - New conversion options for Markdown Conversion
You can now customize how the Markdown Conversion service processes different file types by passing a conversionOptions object. Available options: Images : Set the language for AI-generated image descriptions HTML : Use CSS selectors to extract specific content, or provide a hostname to resolve relative links PDF : Exclude metadata from the output Use the...
Create multiple component mappings in Code Connect UI
Users can now attach multiple code components to their Figma components in the Code Connect UI.
More from Auth0Every Auth0 release →
Brute Force Protection for Passwordless Notifications
To improve the end-user experience and mitigate message spam, Brute Force Protection now proactively prevents the sending of passwordless email and SMS codes to users who are already blocked.
Actions - Transaction Metadata - GA
We are excited to announce that __Actions Transaction Metadata__ is now GA. This feature allows you to set, share, and access, custom data between Actions run in the same `post-login` execution.
Real-time API & Rate Limit Metrics Streaming (Beta)
You can now stream real-time metrics for Auth0 Management API usage and rate limit events directly to your observability platform. These new metric streams give you detailed telemetry on every API request, including success/failure status, specific failure reasons like rate limits, and diagnostic data such as Client ID and request path.
Customize RPID values for Passkeys EA
Boost Passkey adoption by enabling shared enrollment across subdomains. You can now customize the RP ID to allow a single Passkey to authenticate users across multiple applications under the same root domain.Currently in EA Learn more about customizing RP ID for Passkeys: [Configure Passkey Policy...
Actions - Modules - EA
We are excited to announce that __Actions Modules__ is now available in [__Early Access__](https://auth0.com/docs/troubleshoot/product-lifecycle/product-release-stages#early-access "Early Access"). This feature allows you to create, manage, and share reusable code across different Actions within your Auth0 Tenant.
Sender constrained tokens using DPoP is now Generally Available on Enterprise plans
Support for sender constraining tokens using Demonstrating Proof of Possession (DPoP) is now generally available on Enterprise plans. Demonstrating Proof of Possession (DPoP) as defined in RFC9449, is an application level mechanism for binding tokens issued by Auth0 to the client application that requested that token.
Native to Web SSO is now Generally Available
### Description Native to Web SSO enables seamless single sign-on from native mobile applications to web applications. Users authenticated in a native mobile app can now transition to web content without re-authenticating, providing a frictionless cross-platform experience.
Google Workspace Directory Sync for Groups - Now in Early Access
We’re excited to announce that __Google Workspace Directory Sync for Groups__ is now available in Early Access (EA)! This enhancement enables the automatic and reliable sync of group structures and memberships from Google Workspace directly into Auth0 Enterprise Groups.