Sender constrained tokens using DPoP is now Generally Available on Enterprise plans
Support for sender constraining tokens using Demonstrating Proof of Possession (DPoP) is now generally available on Enterprise plans. Demonstrating Proof of Possession (DPoP) as defined in RFC9449, is an application level mechanism for binding tokens issued by Auth0 to the client application that requested that token.
Also shipped Mar 11, 2026Okta in March 2026 →
Introducing Replit Agent 4: Built for Creativity
Replit Agent 4 is now available, featuring an infinite canvas for design, parallel agent execution for backend and frontend tasks, and support for mobile and web app development.
How we built automatic clustering for LLM traces
PostHog has introduced automatic clustering for LLM traces and generations. This feature helps AI product teams analyze usage patterns and identify outlier behaviors in their AI applications.
Purchase and manage additional AI credits
Rolling out this week, admins can now purchase additional AI credits to use in Figma.
eBPF Network Metrics reach GA with enhanced APM capabilities
As we move through 2026, the landscape of software engineering is accelerating at an unprecedented pace. We’re excited to share several updates across the New Relic eBPF platform, including the General Availability of New Relic eBPF Network Metrics, enhancements to eBPF APM. New Relic eBPF Network Metrics is now GA!
Secrets Management UI available in Public Preview
Secrets management launched in Grafana Cloud in August 2025 , with integrations in Synthetic Monitoring, and later expanded to Grafana Cloud k6 workflows and Git Sync. Now, we’re introducing a centralized Secrets Management UI that brings secret operations into one place across Grafana solutions.
Cloudflare Fundamentals - JSON responses and RFC 9457 support for Cloudflare 1xxx errors
Cloudflare-generated 1xxx errors now return structured JSON when clients send Accept: application/json or Accept: application/problem+json . JSON responses follow RFC 9457 (Problem Details for HTTP APIs) ↗ , so any HTTP client that understands Problem Details can parse the base members without Cloudflare-specific code.
More from Auth0Every Auth0 release →
Customize RPID values for Passkeys EA
Boost Passkey adoption by enabling shared enrollment across subdomains. You can now customize the RP ID to allow a single Passkey to authenticate users across multiple applications under the same root domain.Currently in EA Learn more about customizing RP ID for Passkeys: [Configure Passkey Policy...
Google Workspace Directory Sync for Groups - Now in Early Access
We’re excited to announce that __Google Workspace Directory Sync for Groups__ is now available in Early Access (EA)! This enhancement enables the automatic and reliable sync of group structures and memberships from Google Workspace directly into Auth0 Enterprise Groups.
Real-time API & Rate Limit Metrics Streaming (Beta)
You can now stream real-time metrics for Auth0 Management API usage and rate limit events directly to your observability platform. These new metric streams give you detailed telemetry on every API request, including success/failure status, specific failure reasons like rate limits, and diagnostic data such as Client ID and request path.
Introducing the New Spring Boot API SDK
We are excited to announce the release of auth0-springboot-api, a new official SDK designed to streamline authentication and security for Spring Boot backend applications.
Forms - HTTP Vault Connection New Options
We’re excited to announce that we added new options for __Forms HTTP Vault Connections__! This new set of options allows you to configure different authorization methods for your HTTP Request Flow Actions.
Brute Force Protection for Passwordless Notifications
To improve the end-user experience and mitigate message spam, Brute Force Protection now proactively prevents the sending of passwordless email and SMS codes to users who are already blocked.
Actions - Transaction Metadata - GA
We are excited to announce that __Actions Transaction Metadata__ is now GA. This feature allows you to set, share, and access, custom data between Actions run in the same `post-login` execution.
Actions - Modules - EA
We are excited to announce that __Actions Modules__ is now available in [__Early Access__](https://auth0.com/docs/troubleshoot/product-lifecycle/product-release-stages#early-access "Early Access"). This feature allows you to create, manage, and share reusable code across different Actions within your Auth0 Tenant.