Releasesby GlyphSession ID Rotation for SAML and WS-Fed Authentication
## What's new: We've updated session handling in SAML-P and WS-Fed authentication flows to align with industry best practices and our existing OAuth2/OIDC behavior. Following a successful login via SAML-P or WS-Fed, the session ID will now be rotated and a new session cookie will be issued.
Also shipped Mar 26, 2026Okta in March 2026 →
Mutual Exclusivity
What it is: Grouping guides and surveys into a mutual exclusivity set ensures each end-user sees at most one from the group. The primary use case is platform-specific announcements: create a version for iOS and another for Android, add both to the group, and users see only the version that matches their device.
Temperature Parameter: Increased Maximum The maximum allowed value for the temperature parameter for Chat...
Temperature Parameter: Increased Maximum The maximum allowed value for the temperature parameter for Chat Completions has been increased from 1.5 to 2.0. This aligns with the range supported by OpenAI, Fireworks, and other major LLM providers. Higher temperature values produce more random and creative outputs.
developer Message Role (gpt-oss-120b) The Chat Completions API now supports the developer message role for...
developer Message Role (gpt-oss-120b) The Chat Completions API now supports the developer message role for gpt-oss-120b, aligning with the OpenAI API message format. The developer role is functionally equivalent to system , the system role remains supported for backwards compatibility. Other models do not support the developer role.
TTS speak speed (Early Access)
You can now control the speaking rate of Deepgram TTS in the Voice Agent API using the agent.speak.provider.speed parameter. This parameter accepts a float value between 0.7 and 1.5 , with 1.0 as the default.
Updated LLM models
New OpenAI models , Two new models are now available in the Standard pricing tier: gpt-5.4-nano gpt-5.4-mini Gemini 2.0 Flash deprecated , The gemini-2.0-flash model is now deprecated. We recommend migrating to gemini-2.5-flash or a newer Gemini model. See the Google models table for alternatives.
Access - Code Mode for MCP server portals
MCP server portals support Code Mode MCP server patterns , a technique that reduces context window usage by replacing individual tool definitions with a single code execution tool. Code Mode is turned on by default on all portals. To turn it off, edit the portal in Access controls > AI controls and turn off Code Mode under Basic information .
More from Auth0Every Auth0 release →
Customize Signup and Login Prompts: Dashboard UI, Passkey Support, and Custom Database Access
You can now manage custom authentication screen partials directly in the Auth0 dashboard with a purpose-built visual editor. Instead of encoding HTML as strings and sending them through the API, you get a proper code editor with syntax highlighting and live feedback.
Introducing the New Spring Boot API SDK
We are excited to announce the release of auth0-springboot-api, a new official SDK designed to streamline authentication and security for Spring Boot backend applications.
Introducing the Developer Preview Release Stage
We are excited to introduce __Developer Preview__, a new product release stage designed to get upcoming capabilities into your hands faster! Developer Preview serves as a new release phase for new Auth0 product introductions.
Multiple Custom Domains General Availability
We’re excited to announce that __Multiple Custom Domains (MCD)__ is now __Generally Available__. With Multiple Custom Domains, Enterprise customers can support __multiple branded login experiences from a single Auth0 tenant__.
Express Submission to the Okta Integration Network
Auth0 developers leveraging [Express Configuration with Okta](https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/okta/express-configuration) now have a more streamlined process for submitting their application to the Okta Integration Network.
Google Workspace Directory Sync for Groups - Now in Early Access
We’re excited to announce that __Google Workspace Directory Sync for Groups__ is now available in Early Access (EA)! This enhancement enables the automatic and reliable sync of group structures and memberships from Google Workspace directly into Auth0 Enterprise Groups.
Universal Login , "Forgot Password" CTA updated to "Reset Password"
The call to action for the Universal Login forgot password flow has been updated from "Forgot Password" to "Reset Password." This aligns all Universal Login CTAs to be action-oriented. The updated text is available across all languages supported by Auth0.
My Organization API and Embeddable UI Components - Organization Details and IdP Management in Early Access!
We are excited to announce the __Early Access (EA)__ release of the __My Organization API__ and a library of __Embeddable UI Components for Organization Detail and Identity Provider Management__. Every B2B product needs an admin console for customers to manage their own members and security.