Releasesby GlyphSecure your Account API with ACR EA
Auth0's ACR EA release empowers you to secure Account API token issuance by enforcing step-up authentication for sensitive scopes. Whether your users are managing their authentication factors via Universal Login or Embedded flows, you can now gate access through Actions-driven policies or enable a secure-by-default toggle.
Also shipped May 12, 2026Okta in May 2026 →
Introducing Generative Data Apps
🥟 Introducing: Generative Data Apps Today, we're introducing Generative data apps in beta. Anyone can build a powerful app simply by prompting the Hex agent. Everything stays grounded in your trusted data, helping you avoid inconsistencies or hallucinations while building powerful, flexible dashboards and apps.
Shopify App Pricing: charge for usage, recurring subscriptions, or both
Shopify App Pricing supports subscriptions, usage-based charges, or combined models, configured in the Partner Dashboard. What's new: Managed Pricing is now Shopify App Pricing Shopify App Pricing replaces Managed Pricing as Shopify’s default billing solution that gets configured during app submission in the Partner Dashboard.
Support for Postgres 14 ending July 1, 2026
Supabase support for Postgres 14 ends on July 1, 2026. Remaining Postgres 14 projects will be upgraded automatically, while projects using removed extensions like timescaledb, plv8, or pgjwt will be paused.
Nova-3 Multilingual Model Update
Numerals Support Expanded for Nova-3 Multilingual Numeral formatting is now supported for all Nova-3 multilingual languages , except Hindi and Japanese. This enhancement means Nova-3 multilingual can now convert spoken numbers to digits (e.g., "three hundred" → "300") for English, Spanish, French, German, Russian, Portuguese, Italian, and Dutch.
Dify 1.14.1 - Security hardening, workflow stability, and cleaner self-hosted deployments
🚀 What's New in v1.14.1? v1.14.1 is a patch release focused on security hardening, workflow and knowledge-base stability, deployment cleanup, and continued UI platform migration after v1.14.0. 🔐 Security Self-hosted SECRET_KEY hardening , Docker deployments no longer rely on a public default key.
Cloudflare One, Access - Refreshed Access login page
The Access login page and one-time password (OTP) page now feature a refreshed design that improves visual consistency, user trust, and mobile responsiveness. Before: After: The updated login experience includes: Unified authentication card - All sign-in options (identity provider buttons, email input, OTP) now appear in a single card with consistent...
More from Auth0Every Auth0 release →
Non-Unique Emails is Now Generally Available
Non-Unique Emails is now Generally Available (GA) for all Auth0 customers. This feature allows multiple user accounts to share the same email address within a database connection, supporting real-world use cases like families, small businesses, and multi-role users who need separate accounts tied to the same email.
Online Refresh Tokens is now in Beta
We are excited to announce that our new feature "Online refresh tokens" is now available to all customers in Beta. This powerful new feature is designed to simplify token management and modernize your application architecture, especially for Single Page Applications (SPAs) allowing you to bind refresh tokens to the sessions they originated from, which...
Fix for Empty login_hint Parameter on External Identity Providers Requests
__What's Changing:__ We are fixing an issue where Auth0 was including an empty `login_hint` query parameter when redirecting users to external identity providers. Going forward, `login_hint` will only be included in the authorization request when a value is actually present.
Resend Email Provider is now Generally Available
 We're excited to announce that __Resend__ is now __Generally Available__ as an out-of-the-box email delivery provider in Auth0!
Auth for MCP is now Generally Available
We are excited to announce Auth for MCP is now Generally Available. Auth for MCP gives you a straightforward way to add authentication and authorization to any MCP server, so you control exactly who gets access, and what they get access to. Implement authentication, CIMD registration, and OBO token exchange for AI agents.
Suspicious IP Throttling for Custom Token Exchange
We have introduced a Dashboard configuration interface for Suspicious IP Throttling, specifically for Custom Token Exchange. This update allows administrators to easily set thresholds to throttle high-velocity traffic from suspicious IP addresses during the token exchange process.
Support for Private Key JWT assertions and additional signing algorithms on Okta and OIDC enterprise connections
Private Key JWT assertions and expanded signing algorithm support are now generally available across Enterprise Okta and OIDC Connections. Private Key JWT assertions deliver enterprise-grade security by leveraging asymmetric cryptography to authenticate against your upstream Okta and OIDC identity providers.
"CMD+K" available now on Auth0 Dashboard
 We're excited to announce the new __CMD+K Command Palette functionality__ is now available to all users in the __Auth0 dashboard__.