Releasesby GlyphIntroducing the New Spring Boot API SDK
We are excited to announce the release of auth0-springboot-api, a new official SDK designed to streamline authentication and security for Spring Boot backend applications.
Also shipped Mar 17, 2026Okta in March 2026 →
Grafana Assistant in Slack is now generally available
Grafana Assistant arrives in Slack and lets you troubleshoot while on the go and with your colleagues in real-time. Grafana Assistant in Slack allows you to access the data and knowledge in Grafana Assistant in Slack. Ask about your traces, metrics, the latest deployment and how to fix high p99 latency in your search service.
Skills in Grafana Assistant are now generally available
Skills are now generally available for all Grafana Assistant users. Skills let you write runbooks, workflows, hints and context guides so that the Assistant can drill down even better in your stack. You can also associate slash commands with Skills so that /my-skill brings up your Skill and the Assistant works through it specifically.
Nova-3 Model Update
🌏 Nova-3 now supports the following new languages and language codes: Chinese (Cantonese, Traditional): zh-HK Thai: th , th-TH 🚀 Also releasing improved Nova-3 models for the following languages: Bengali ( bn ) Marathi ( mr ) Tamil ( ta ) Telugu ( te ) Access these models by setting model="nova-3" and the relevant language code in your request.
Agents, Workers - @cloudflare/codemode v0.2.1: MCP barrel export, zero-dependency main entry point, and custom sandbox modules
The latest releases of @cloudflare/codemode ↗ add a new MCP barrel export, remove ai and zod as required peer dependencies from the main entry point, and give you more control over the sandbox.
AI Gateway - Log AI Gateway request metadata without storing payloads
AI Gateway now supports the cf-aig-collect-log-payload header, which controls whether request and response bodies are stored in logs. By default, this header is set to true and payloads are stored alongside metadata.
More from Auth0Every Auth0 release →
Google Workspace Directory Sync for Groups - Now in Early Access
We’re excited to announce that __Google Workspace Directory Sync for Groups__ is now available in Early Access (EA)! This enhancement enables the automatic and reliable sync of group structures and memberships from Google Workspace directly into Auth0 Enterprise Groups.
Sender constrained tokens using DPoP is now Generally Available on Enterprise plans
Support for sender constraining tokens using Demonstrating Proof of Possession (DPoP) is now generally available on Enterprise plans. Demonstrating Proof of Possession (DPoP) as defined in RFC9449, is an application level mechanism for binding tokens issued by Auth0 to the client application that requested that token.
Customize RPID values for Passkeys EA
Boost Passkey adoption by enabling shared enrollment across subdomains. You can now customize the RP ID to allow a single Passkey to authenticate users across multiple applications under the same root domain.Currently in EA Learn more about customizing RP ID for Passkeys: [Configure Passkey Policy...
Session ID Rotation for SAML and WS-Fed Authentication
## What's new: We've updated session handling in SAML-P and WS-Fed authentication flows to align with industry best practices and our existing OAuth2/OIDC behavior. Following a successful login via SAML-P or WS-Fed, the session ID will now be rotated and a new session cookie will be issued.
Real-time API & Rate Limit Metrics Streaming (Beta)
You can now stream real-time metrics for Auth0 Management API usage and rate limit events directly to your observability platform. These new metric streams give you detailed telemetry on every API request, including success/failure status, specific failure reasons like rate limits, and diagnostic data such as Client ID and request path.
Forms - HTTP Vault Connection New Options
We’re excited to announce that we added new options for __Forms HTTP Vault Connections__! This new set of options allows you to configure different authorization methods for your HTTP Request Flow Actions.
Brute Force Protection for Passwordless Notifications
To improve the end-user experience and mitigate message spam, Brute Force Protection now proactively prevents the sending of passwordless email and SMS codes to users who are already blocked.
Actions - Transaction Metadata - GA
We are excited to announce that __Actions Transaction Metadata__ is now GA. This feature allows you to set, share, and access, custom data between Actions run in the same `post-login` execution.