Releasesby GlyphMultiple Custom Domains General Availability
We’re excited to announce that __Multiple Custom Domains (MCD)__ is now __Generally Available__. With Multiple Custom Domains, Enterprise customers can support __multiple branded login experiences from a single Auth0 tenant__.
Also shipped Apr 8, 2026Okta in April 2026 →
Custom OIDC Providers for Supabase Auth
Supabase Auth now supports custom OpenID Connect (OIDC) providers, enabling users to connect identity providers like GitHub Enterprise and regional services to their projects.
Security Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23869, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause excessive CPU consumption. Here's what Netlify customers need to know. Impact on Netlify Nominally, this is a server-side DoS vulnerability.
New pricing and packaging
- Changed: New tailnet plan signups are billed based on occupied user seats instead of monthly active users. Existing tailnets on a legacy plan will continue to be billed based on monthly active users. Changed: All plans can have an unlimited number of user devices in a tailnet.
Dynamic dashboards is now generally available
Dynamic dashboards are now on by default for all Grafana Cloud users and self-managed Grafana instances. Every new and existing dashboard uses the new layout engine, editing experience, and dashboard structure automatically. Your existing dashboards are migrated to the new schema when you open them. No manual steps required.
Manage and use secrets in Grafana Cloud k6
We’re excited to announce the public preview of Secrets Management for Grafana Cloud k6, a new feature that lets you securely store and use sensitive values in your performance tests. If your tests rely on API tokens, credentials, or any other confidential data, you no longer need to hardcode them into your scripts or pass them around manually.
Event Time now available in Derived Properties
What it is: Event Time is now a selectable property in the derived property builder. You can pair it with any date-type user property to compute time differences: for instance, 'registration date - Event Time' gives you days since a user registered.
More from Auth0Every Auth0 release →
Express Submission to the Okta Integration Network
Auth0 developers leveraging [Express Configuration with Okta](https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/okta/express-configuration) now have a more streamlined process for submitting their application to the Okta Integration Network.
Universal Login , "Forgot Password" CTA updated to "Reset Password"
The call to action for the Universal Login forgot password flow has been updated from "Forgot Password" to "Reset Password." This aligns all Universal Login CTAs to be action-oriented. The updated text is available across all languages supported by Auth0.
My Organization API and Embeddable UI Components - Organization Details and IdP Management in Early Access!
We are excited to announce the __Early Access (EA)__ release of the __My Organization API__ and a library of __Embeddable UI Components for Organization Detail and Identity Provider Management__. Every B2B product needs an admin console for customers to manage their own members and security.
Akamai Supplemental Signals is Now GA
__Auth0 Akamai Supplemental Signals is now GA__ and available across the full authentication lifecycle. This update allows developers to ingest risk scores and edge intelligence from Akamai Bot Manager and Account Protector into several new Action triggers: __Pre-User Registration__, __Post-User Registration__, __Post-Challenge__, and __Post-Change...
Introducing the Developer Preview Release Stage
We are excited to introduce __Developer Preview__, a new product release stage designed to get upcoming capabilities into your hands faster! Developer Preview serves as a new release phase for new Auth0 product introductions.
Early Access availability of DPoP sender constraining for Enterprise Connections
Demonstrating Proof of Possession (DPoP) sender constraining for Enterprise Connections is now available in Early Access. Customers can now establish Okta and OIDC Enterprise Connections with DPoP enabled on those connections. This is available on all plans with Enterprise Connections.
Multi-Resource Refresh Tokens (MRRT) is now Generally Available
Following the successful Early Access period that began on August 11, 2025, we are excited to announce that MRRT is now available to all customers with full production support.
Customize Signup and Login Prompts: Dashboard UI, Passkey Support, and Custom Database Access
You can now manage custom authentication screen partials directly in the Auth0 dashboard with a purpose-built visual editor. Instead of encoding HTML as strings and sending them through the API, you get a proper code editor with syntax highlighting and live feedback.