IPSIE session_expiry Claim Support for Okta and OIDC Enterprise Connections
Auth0 now supports the session_expiry claim for Okta and OIDC-based Enterprise connections, in alignment with the IPSIE SL1 profile. When your upstream identity provider includes a session_expiry value in the ID token, Auth0 uses it to enforce the ceiling on the Auth0 session lifetime , evaluated as the minimum of the IdP claim, your tenant's absolute...
Also shipped Jul 8, 2026Okta in July 2026 →
Object metadata column is now in Public Preview
The _object_metadata column is now in Public Preview. The _object_metadata column is a hidden metadata column that exposes object-level properties for objects in cloud storage, including MIME type, ETag, user-defined key-value metadata, system-defined metadata, and object tags. It is available starting from Databricks Runtime 18.1.
Genie products now use pay-as-you-go pricing
Starting July 8, 2026 at 00:00 UTC, Genie products, including Genie Agents , Genie Code , and Genie One , are billed following a pay-as-you-go pricing model that includes 150 Databricks units (DBUs) of free large language model (LLM) usage every month, equivalent to about $10.50 in the US East region.
Google Gemini 2.5 Flash and Pro are scheduled for retirement
Google Gemini 2.5 Flash and Gemini 2.5 Pro will be retired on October 2, 2026. The recommended replacement models are Gemini 3.1 Pro or Gemini 3.5 Flash. See Deprecated and retired models for migration guidance.
Anthropic Claude Sonnet 4 is scheduled for retirement
Anthropic Claude Sonnet 4 will be retired on October 9, 2026. Claude Sonnet 4.6 is the recommended replacement. See Deprecated and retired models for migration guidance.
Restrict access to AI Functions with Unity Catalog permissions (Public Preview)
You can now use Unity Catalog permissions to restrict which task-specific AI Functions your organization can access, independent of foundation model access. Contact your account team to enable this feature. See AI Functions Unity Catalog permissions .
Genie Agents now uses pay-as-you-go pricing
Starting July 8, 2026 at 00:00 UTC, Genie Agents is billed following a pay-as-you-go pricing model that includes 150 DBUs of free large language model (LLM) usage every month, equivalent to about $10.50 in the US East region. Usage beyond the free amount is billed in DBUs, reflecting the underlying LLM models and agents that power each Genie Agents session.
More from Auth0Every Auth0 release →
Google One Tap Support for Universal Login EA
Bring frictionless, one-tap authentication to your users! Auth0 now supports Google One Tap within the Universal Login prompt for Early Access. Users are greeted with a secure, non-intrusive identity overlay that lets them sign in instantly with a single tap, completely eliminating manual forms and page redirects.
Tenant Log Catalog Now Available in Auth0 Docs
We now have an expansive and interactive Tenant Log Catalog available to dive deeper into [Tenant Logs](https://auth0.com/docs/deploy-monitor/logs) Codes and their associated schemas.
Third-Party Apps for Organizations is now Generally Available
Third-party applications now work with Auth0 Organizations. Tenant admins can allow or block third-party app access on a per-organization basis , access is blocked by default, so existing organizations are unaffected until you explicitly opt in.
Dashboard Search for Roles Now in Beta
__Dashboard Search for Roles is now available in Public Beta!__ Find your Roles faster without scrolling through paginated lists. Dashboard users can now __search Roles in real time by ID and name.__ Rolling out progressively to Public Cloud tenants starting this week, with broader availability in the coming weeks.
Automate Downstream Provisioning with Outbound SCIM for Users via Event Streams
We are excited to announce the release of our new __Outbound SCIM Action template for Event Streams__! This new capability delivers an infrastructure-free way to push `user.created`, `user.updated`, and `user.deleted` events directly from Auth0 to any `SCIM 2.0`-compliant downstream application, making it easier than ever to automate your user provisioning...
Anonymous sessions are now in beta!
We are excited to announce that Anonymous Sessions is now available in Beta for Auth0 customers with paid plans. This feature enables applications to create and manage stateless sessions for unauthenticated users, supporting use cases like guest checkout, shopping cart persistence, and pre-login personalization.
Self-Service Enterprise Configuration: Customer admins can now configure third-party application access during SSO setup
When generating a Self-Service Enterprise Configuration ticket, you can now delegate the third-party application access decision to your customer's customer admin , rather than setting it yourself at ticket creation time.
Refresh Token metadata is now Generally Available
We're excited to announce that **Refresh Token Metadata** is now **Generally Available** for Enterprise customers. Refresh Token Metadata allows you to attach custom key-value pairs to refresh tokens, enabling richer context storage and more personalized authentication experiences.