Releasesby GlyphAuth0 Teams: Delegate tenant management with the new Tenant Manager role
You can now delegate tenant-level user management with the **Tenant Manager** role. This allows you to offload day-to-day administrative tasks from Team Owners to dedicated managers, providing the autonomy they need without exposing sensitive configuration settings.
Also shipped May 29, 2026Okta in May 2026 →
Guardrails: Protect your Agents, Data, and Costs
OpenRouter has introduced configurable security and governance tools, including budget enforcement, zero data retention, and prompt injection defense.
What's new in Sigma
AI Support for Amazon Bedrock AI provider (Beta) Amazon Bedrock is now a supported AI provider, letting you use Anthropic foundation models with Sigma AI-powered features. For setup instructions, see Add Amazon Bedrock as an AI provider . Admin Connect to ClickHouse (Beta) Sigma now supports connections to ClickHouse.
Cloudflare One Client for macOS (version 2026.5.1155.1)
A new Beta release for the macOS Cloudflare One Client is now available on the beta releases downloads page . This release introduces the new Cloudflare One Client UI for macOS! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Cloudflare One Client for Windows (version 2026.5.1155.1)
A new Beta release for the Windows Cloudflare One Client is now available on the beta releases downloads page . This release introduces the new Cloudflare One Client UI for Windows! You can expect a cleaner and more intuitive design as well as easier access to common actions and information.
Agents - Share sandbox previews through Cloudflare Tunnel
Sandboxes can expose a service running inside the container on a public preview URL through the sandbox.tunnels namespace. The SDK uses cloudflared inside the sandbox so you can share a running service without configuring exposePort() or a custom domain.
🆕 Improved Nova-3 Medical Batch Model Released
We’ve released an upgraded Nova-3 Medical batch model with improved medical term recognition. Key Improvements: Expands the model’s medical vocabulary with new medical terms Boosts medical term recognition to 97.20% KRR Maintains WER parity with no observed regression on common or conversational terms
More from Auth0Every Auth0 release →
Token Vault with Organization Support Available in GA!
We're excited to announce the GA release of __Token Vault with Organization Support__! ISVs building multi-tenant B2B SaaS applications and agents on Auth0 Organizations can now use Token Vault to store and exchange third-party tokens within the context of each organization their users belong to.
Custom Token Exchange - Delegated Authorization now available in Open Early Access
We're excited to announce that __Custom Token Exchange now supports Delegated Authorization__. This release is available to all __Enterprise, B2B Professional, and B2C Professional customers__. Delegated Authorization covers scenarios where a principal (e.g. a human support agent, a backend service, an AI agent) performs actions in the context of a user.
Actions - Access Token Scope Customization - EA
We are excited to announce that we are adding __new Credentials Exchange Actions Access Token Scope Interfaces__ and they are now available in [__Early Access__](https://auth0.com/docs/troubleshoot/product-lifecycle/product-release-stages#early-access "Early Access").
Customize RPID values for Passkeys GA
Boost Passkey adoption by enabling shared enrollment across subdomains. You can now customize the RP ID to allow a single Passkey to authenticate users across multiple applications under the same root domain. Now GA!
General availability of DPoP sender constraining for Enterprise Connections
Demonstrating Proof of Possession (DPoP) sender constraining for Enterprise Connections is now generally available. Customers can now establish Okta and OIDC Enterprise Connections with DPoP enabled on those connections. This is available on all plans with Enterprise Connections.
Federated Logout for OIDC and Okta enterprise connections is now generally available
Federated Logout is now generally available for OIDC and Okta enterprise connections. When a user logs out with `?federated` appended to the logout URL, Auth0 calls the upstream identity provider's `end_session_endpoint` to terminate the IdP session, closing the gap where a lingering IdP session could silently re-authenticate the user on their next login...
Secure Canonical Domains with New Tenant ACL Signals
We have enhanced Tenant Access Control Lists (ACLs) to provide granular control over upstream proxy infrastructure and canonical domain routing. With this update, you can now isolate traffic by enforcing distinct rules on your canonical hostnames while keeping your user-facing custom domains open. ##### What's New?
Dashboard Navigation & IA Refresh is now in Beta
We are excited to announce that the redesigned __Dashboard navigation and information architecture (IA)__ is now available in Beta. This update is the first step toward a more unified platform experience across Auth0, making it faster to find what you need and easier to act on everything across the platform.