Third-Party Apps for Organizations is now Generally Available
Third-party applications now work with Auth0 Organizations. Tenant admins can allow or block third-party app access on a per-organization basis , access is blocked by default, so existing organizations are unaffected until you explicitly opt in.
Also shipped Jul 10, 2026Okta in July 2026 →
Online Feature Store (Public Preview)
Online Feature Store is now available in public preview. Serve the latest feature values with low-latency online retrieval backed by Snowflake Postgres for real-time ML applications such as fraud detection, recommendations, and personalization.
Databricks-provided MCP Services will GA soon
Databricks-provided MCP Services for SaaS applications such as Slack, GitHub, Atlassian, and Google Drive will soon be generally available, with both read and write operations enabled by default. Admins and users can disable MCP Services and individual tools in Unity Gateway . See Connect agents to tools with MCP Services .
Secrets in Unity Catalog (Public Preview)
You can now store, govern, and access secrets as securable objects in Unity Catalog. A Unity Catalog secret uses the three-level namespace ( catalog.schema.secret ) and is governed by Unity Catalog privileges, so you can apply the same access controls and auditing that you use for other data assets. See Secrets in Unity Catalog .
Dreams research preview adds Claude Fable 5 and Claude Sonnet 5
Dreams, in research preview, now supports Claude Fable 5 and Claude Sonnet 5.
Agentic autofix for code scanning alerts in public preview
Agentic autofix is now in public preview for all code scanning alerts. It remediates alerts generated by CodeQL and third-party scanning tools by working across your codebase the way a developer would, it explores relevant files, proposes a fix, and reruns the original analysis to confirm the fix closes the alert before opening a pull request for your...
supabase-js will require TypeScript 5.0+ from January 31, 2027
@supabase/supabase-js will require TypeScript 5.0 starting January 31, 2027, dropping support for TypeScript 4.7 to 4.9.
More from Auth0Every Auth0 release →
Google One Tap Support for Universal Login EA
Bring frictionless, one-tap authentication to your users! Auth0 now supports Google One Tap within the Universal Login prompt for Early Access. Users are greeted with a secure, non-intrusive identity overlay that lets them sign in instantly with a single tap, completely eliminating manual forms and page redirects.
IPSIE session_expiry Claim Support for Okta and OIDC Enterprise Connections
Auth0 now supports the session_expiry claim for Okta and OIDC-based Enterprise connections, in alignment with the IPSIE SL1 profile. When your upstream identity provider includes a session_expiry value in the ID token, Auth0 uses it to enforce the ceiling on the Auth0 session lifetime , evaluated as the minimum of the IdP claim, your tenant's absolute...
Tenant Log Catalog Now Available in Auth0 Docs
We now have an expansive and interactive Tenant Log Catalog available to dive deeper into [Tenant Logs](https://auth0.com/docs/deploy-monitor/logs) Codes and their associated schemas.
Dashboard Search for Roles Now in Beta
__Dashboard Search for Roles is now available in Public Beta!__ Find your Roles faster without scrolling through paginated lists. Dashboard users can now __search Roles in real time by ID and name.__ Rolling out progressively to Public Cloud tenants starting this week, with broader availability in the coming weeks.
Automate Downstream Provisioning with Outbound SCIM for Users via Event Streams
We are excited to announce the release of our new __Outbound SCIM Action template for Event Streams__! This new capability delivers an infrastructure-free way to push `user.created`, `user.updated`, and `user.deleted` events directly from Auth0 to any `SCIM 2.0`-compliant downstream application, making it easier than ever to automate your user provisioning...
Anonymous sessions are now in beta!
We are excited to announce that Anonymous Sessions is now available in Beta for Auth0 customers with paid plans. This feature enables applications to create and manage stateless sessions for unauthenticated users, supporting use cases like guest checkout, shopping cart persistence, and pre-login personalization.
Self-Service Enterprise Configuration: Customer admins can now configure third-party application access during SSO setup
When generating a Self-Service Enterprise Configuration ticket, you can now delegate the third-party application access decision to your customer's customer admin , rather than setting it yourself at ticket creation time.
Cross App Access (XAA) for Resource Applications is now in Open Early Access
We're excited to announce that __Cross App Access (XAA) for Resource Applications is now in Open Early Access__. You can use this feature in production today at no additional cost through Auth0 Enterprise Connections, available to __Enterprise, B2B Pro, and B2B Essential__ customers, or test it during the __trial period on Free tenants__.