Releasesby GlyphToken Vault with Organization Support Available in GA!
We're excited to announce the GA release of __Token Vault with Organization Support__! ISVs building multi-tenant B2B SaaS applications and agents on Auth0 Organizations can now use Token Vault to store and exchange third-party tokens within the context of each organization their users belong to.
Also shipped May 28, 2026Okta in May 2026 →
Hex now connects to your apps as an MCP client
🔌 Hex is now an MCP client Your data tells you what happened. The why lives somewhere else , in strategy docs, meeting notes, Slack threads, customer conversations. Today, the Hex agent can read all of it. Connect any tool that exposes an MCP server to the Hex agent. As part of our public beta, we’re launching with two named connectors: Notion & Linear.
Pipelines pricing announced
Cloudflare Pipelines is a streaming data platform that ingests events, transforms them with SQL, and writes to R2 as JSON, Parquet, or Apache Iceberg ↗ tables. Pipelines now has published pricing based on two usage dimensions: the volume of data processed by SQL transforms and the volume of data delivered to sinks. Ingress into a Pipeline stream is free.
R2, R2 Data Catalog - R2 Data Catalog pricing announced
R2 Data Catalog is a managed Apache Iceberg ↗ data catalog built directly into R2 buckets, queryable by any Iceberg-compatible engine such as Spark, Snowflake, and DuckDB. R2 Data Catalog now has published pricing for catalog operations and table compaction, in addition to standard R2 storage and operations . Billing is not yet enabled.
R2 SQL pricing announced
R2 SQL is a serverless, distributed query engine that runs SQL against Apache Iceberg ↗ tables stored in R2 Data Catalog . R2 SQL now has published pricing based on a single dimension: the volume of compressed data scanned to execute your queries.
You can now use the DigitalOcean Control Panel to create, connect to, tag, resize, and restore Managed...
You can now use the DigitalOcean Control Panel to create, connect to, tag, resize, and restore Managed Weaviate clusters (in private preview). See the Managed Weaviate docs for more information.
Linear Diffs
Agents generate large volumes of code, but individuals are still accountable for the changes that merge. This leads to a lot of review work, and the capability and performance of traditional review tools hasn't kept up. Today, we're releasing Linear Diffs to make reviewing code a fast and fluid experience native to Linear.
More from Auth0Every Auth0 release →
Auth0 Teams: Delegate tenant management with the new Tenant Manager role
You can now delegate tenant-level user management with the **Tenant Manager** role. This allows you to offload day-to-day administrative tasks from Team Owners to dedicated managers, providing the autonomy they need without exposing sensitive configuration settings.
Custom Token Exchange - Delegated Authorization now available in Open Early Access
We're excited to announce that __Custom Token Exchange now supports Delegated Authorization__. This release is available to all __Enterprise, B2B Professional, and B2C Professional customers__. Delegated Authorization covers scenarios where a principal (e.g. a human support agent, a backend service, an AI agent) performs actions in the context of a user.
Actions - Access Token Scope Customization - EA
We are excited to announce that we are adding __new Credentials Exchange Actions Access Token Scope Interfaces__ and they are now available in [__Early Access__](https://auth0.com/docs/troubleshoot/product-lifecycle/product-release-stages#early-access "Early Access").
General availability of DPoP sender constraining for Enterprise Connections
Demonstrating Proof of Possession (DPoP) sender constraining for Enterprise Connections is now generally available. Customers can now establish Okta and OIDC Enterprise Connections with DPoP enabled on those connections. This is available on all plans with Enterprise Connections.
Federated Logout for OIDC and Okta enterprise connections is now generally available
Federated Logout is now generally available for OIDC and Okta enterprise connections. When a user logs out with `?federated` appended to the logout URL, Auth0 calls the upstream identity provider's `end_session_endpoint` to terminate the IdP session, closing the gap where a lingering IdP session could silently re-authenticate the user on their next login...
Secure Canonical Domains with New Tenant ACL Signals
We have enhanced Tenant Access Control Lists (ACLs) to provide granular control over upstream proxy infrastructure and canonical domain routing. With this update, you can now isolate traffic by enforcing distinct rules on your canonical hostnames while keeping your user-facing custom domains open. ##### What's New?
Customize RPID values for Passkeys GA
Boost Passkey adoption by enabling shared enrollment across subdomains. You can now customize the RP ID to allow a single Passkey to authenticate users across multiple applications under the same root domain. Now GA!
Dashboard Navigation & IA Refresh is now in Beta
We are excited to announce that the redesigned __Dashboard navigation and information architecture (IA)__ is now available in Beta. This update is the first step toward a more unified platform experience across Auth0, making it faster to find what you need and easier to act on everything across the platform.