Releasesby GlyphGoogle Workspace Directory Sync for Groups - Now in Early Access
We’re excited to announce that __Google Workspace Directory Sync for Groups__ is now available in Early Access (EA)! This enhancement enables the automatic and reliable sync of group structures and memberships from Google Workspace directly into Auth0 Enterprise Groups.
Also shipped Mar 13, 2026Okta in March 2026 →
Vibe Coding Enterprise Data Apps with Replit and Databricks
Replit launched a Databricks connector that allows users to build enterprise data apps using governed tables and models. The integration supports natural-language data querying via Databricks Genie.
Configuring Identity-Aware Proxy (IAP) directly on Cloud Run to secure your services without the need for...
Configuring Identity-Aware Proxy (IAP) directly on Cloud Run to secure your services without the need for load balancers is in General Availability (GA) .
You can now use the Pub/Sub remote MCP server to manage Pub/Sub resources
You can now use the Pub/Sub remote MCP server to manage Pub/Sub resources. You can create, list, get, update, and delete Pub/Sub topics, subscriptions, and snapshots, as well as publish messages to topics. This feature is in Preview .
What's new in Sigma
AI apps CSV upload using customer-owned cloud storage (GA) CSV upload using a customer-owned cloud storage data flow is now generally available. This option offers an alternative to the default data flow through Sigma's infrastructure.
Grafana Assistant CLI and Assistant Tunnel now in Public Preview
Grafana Assistant arrives in the CLI! Use Grafana Assistant right in the CLI alongside all the other tools you use for your observability job. In the CLI, the Assistant can help you with all the things it can also do in the browser or in Slack. Ask about recent errors, latency or traces - get the answer in the CLI.
Checkout and Customer Account UI extensions available by default in new development shops
We are ending the developer preview for checkout and customer account UI extensions. With this update: All new development shops on the Shopify Plus plan have access to checkout UI extensions All new development shops on all plans have access to customer account UI extensions All existing development shops will not be affected by this change
More from Auth0Every Auth0 release →
Sender constrained tokens using DPoP is now Generally Available on Enterprise plans
Support for sender constraining tokens using Demonstrating Proof of Possession (DPoP) is now generally available on Enterprise plans. Demonstrating Proof of Possession (DPoP) as defined in RFC9449, is an application level mechanism for binding tokens issued by Auth0 to the client application that requested that token.
Customize RPID values for Passkeys EA
Boost Passkey adoption by enabling shared enrollment across subdomains. You can now customize the RP ID to allow a single Passkey to authenticate users across multiple applications under the same root domain.Currently in EA Learn more about customizing RP ID for Passkeys: [Configure Passkey Policy...
Introducing the New Spring Boot API SDK
We are excited to announce the release of auth0-springboot-api, a new official SDK designed to streamline authentication and security for Spring Boot backend applications.
Real-time API & Rate Limit Metrics Streaming (Beta)
You can now stream real-time metrics for Auth0 Management API usage and rate limit events directly to your observability platform. These new metric streams give you detailed telemetry on every API request, including success/failure status, specific failure reasons like rate limits, and diagnostic data such as Client ID and request path.
Forms - HTTP Vault Connection New Options
We’re excited to announce that we added new options for __Forms HTTP Vault Connections__! This new set of options allows you to configure different authorization methods for your HTTP Request Flow Actions.
Brute Force Protection for Passwordless Notifications
To improve the end-user experience and mitigate message spam, Brute Force Protection now proactively prevents the sending of passwordless email and SMS codes to users who are already blocked.
Actions - Transaction Metadata - GA
We are excited to announce that __Actions Transaction Metadata__ is now GA. This feature allows you to set, share, and access, custom data between Actions run in the same `post-login` execution.
Session ID Rotation for SAML and WS-Fed Authentication
## What's new: We've updated session handling in SAML-P and WS-Fed authentication flows to align with industry best practices and our existing OAuth2/OIDC behavior. Following a successful login via SAML-P or WS-Fed, the session ID will now be rotated and a new session cookie will be issued.