Releasesby GlyphOnline Refresh Tokens is now in Beta
We are excited to announce that our new feature "Online refresh tokens" is now available to all customers in Beta. This powerful new feature is designed to simplify token management and modernize your application architecture, especially for Single Page Applications (SPAs) allowing you to bind refresh tokens to the sessions they originated from, which...
Also shipped May 11, 2026Okta in May 2026 →
Prisma 8: April milestone complete, the extension API is open
Prisma 8 has opened its extension API to outside authors, allowing developers to build custom extensions. The first four extensions, including pgvector and ParadeDB, have been released.
Cloudflare One Client for Windows (version 2026.4.1350.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This release introduces the new Cloudflare One Client UI for Windows! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Cloudflare One Client for macOS (version 2026.4.1350.0)
A new GA release for the macOS Cloudflare One Client is now available on the stable releases downloads page . This release introduces the new Cloudflare One Client UI for macOS! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Cloudflare One Client for Linux (version 2026.4.1350.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This release introduces the new Cloudflare One Client UI for Linux! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
WAF Release - 2026-05-11
Key Findings Existing rule enhancements have been deployed to improve detection resilience against broad classes of web attacks and strengthen behavioral coverage. Continuous Rule Improvements We are continuously refining our managed rules to provide more resilient protection and deeper insights into attack patterns.
Real-Time Behavior Targeting for Web Experiment [Beta]
Description: Target users the moment they exhibit a behavior , no server-side evaluation, no delay. Real-time Behavioral Targeting lets you define client-side conditions (like adding an item to cart 3+ times) and serve the right experiment variant as soon as a user meets the targeting criteria. Learn more about real time behavioral targeting.
More from Auth0Every Auth0 release →
Secure your Account API with ACR EA
Auth0's ACR EA release empowers you to secure Account API token issuance by enforcing step-up authentication for sensitive scopes. Whether your users are managing their authentication factors via Universal Login or Embedded flows, you can now gate access through Actions-driven policies or enable a secure-by-default toggle.
Non-Unique Emails is Now Generally Available
Non-Unique Emails is now Generally Available (GA) for all Auth0 customers. This feature allows multiple user accounts to share the same email address within a database connection, supporting real-world use cases like families, small businesses, and multi-role users who need separate accounts tied to the same email.
Fix for Empty login_hint Parameter on External Identity Providers Requests
__What's Changing:__ We are fixing an issue where Auth0 was including an empty `login_hint` query parameter when redirecting users to external identity providers. Going forward, `login_hint` will only be included in the authorization request when a value is actually present.
Resend Email Provider is now Generally Available
 We're excited to announce that __Resend__ is now __Generally Available__ as an out-of-the-box email delivery provider in Auth0!
Auth for MCP is now Generally Available
We are excited to announce Auth for MCP is now Generally Available. Auth for MCP gives you a straightforward way to add authentication and authorization to any MCP server, so you control exactly who gets access, and what they get access to. Implement authentication, CIMD registration, and OBO token exchange for AI agents.
Support for Private Key JWT assertions and additional signing algorithms on Okta and OIDC enterprise connections
Private Key JWT assertions and expanded signing algorithm support are now generally available across Enterprise Okta and OIDC Connections. Private Key JWT assertions deliver enterprise-grade security by leveraging asymmetric cryptography to authenticate against your upstream Okta and OIDC identity providers.
"CMD+K" available now on Auth0 Dashboard
 We're excited to announce the new __CMD+K Command Palette functionality__ is now available to all users in the __Auth0 dashboard__.
Suspicious IP Throttling for Custom Token Exchange
We have introduced a Dashboard configuration interface for Suspicious IP Throttling, specifically for Custom Token Exchange. This update allows administrators to easily set thresholds to throttle high-velocity traffic from suspicious IP addresses during the token exchange process.