Releasesby GlyphSelf-Service Enterprise Configuration: Customer admins can now configure third-party application access during SSO setup
When generating a Self-Service Enterprise Configuration ticket, you can now delegate the third-party application access decision to your customer's customer admin , rather than setting it yourself at ticket creation time.
Also shipped Jul 22, 2026Okta in July 2026 →
External OAuth and configurable scopes for MCP servers (General availability)
Two new hierarchical parameters let you bind MCP servers to your organization’s existing identity provider (IdP) and control which OAuth scopes MCP clients discover. This enables MCP clients such as Claude, Cursor, and ChatGPT to authenticate against your corporate IdP instead of Snowflake OAuth.
Variant and Variant shredding are now generally available
Variant is now generally available . Variant is a flexible data type for semi-structured data that delivers structured-like query performance through Variant shredding, which is also generally available.
Transactions are now generally available
Transactions that write to Unity Catalog managed Delta tables are now generally available. Group multiple SQL statements across one or more tables into a single atomic transaction using BEGIN ATOMIC ... END; or BEGIN TRANSACTION; ... COMMIT; syntax. All changes succeed together or roll back together, ensuring data consistency across your operations.
Email notifications for expiring service principal tokens are now generally available
Databricks now automatically sends an email notification when a service principal token is set to expire within seven days. Because service principals don't have their own mailboxes, Databricks sends these notifications to workspace admins.
Role-based access control (RBAC) is in Public Preview
Role-based access control (RBAC) is now in Public Preview. RBAC lets users assume a role in Databricks using only that role's permissions for the duration of the session instead of their own accumulated permissions. This enables exclusive access.
Governance Hub is in Beta
Governance Hub is in Beta . Governance Hub is a centralized, account-level UI in the account console for monitoring governance across your Databricks account. It provides a unified view of data health and coverage, AI usage and spend, and cost drivers, with prioritized insights and recommendations. All views respect existing permissions.
More from Auth0Every Auth0 release →
Anonymous sessions are now in beta!
We are excited to announce that Anonymous Sessions is now available in Beta for Auth0 customers with paid plans. This feature enables applications to create and manage stateless sessions for unauthenticated users, supporting use cases like guest checkout, shopping cart persistence, and pre-login personalization.
Cross App Access (XAA) for Resource Applications is now in Open Early Access
We're excited to announce that __Cross App Access (XAA) for Resource Applications is now in Open Early Access__. You can use this feature in production today at no additional cost through Auth0 Enterprise Connections, available to __Enterprise, B2B Pro, and B2B Essential__ customers, or test it during the __trial period on Free tenants__.
Dashboard Search for Organization members now in Beta!
__Dashboard Search for Organization members is now available in Public Beta!__ Find your organization members faster without scrolling through paginated lists. Users can now __search Organization Members in real time by name, email, ID and filter by blocked status.__ Rolling out progressively to Public Cloud tenants starting this week, with broader...
Actions Reference Catalog Now Available in Auth0 Docs
We now have an expansive Actions Reference Catalog available to dive deeper into [Actions Triggers](https://auth0.com/docs/customize/actions/explore-triggers) and their Event and API Objects.
Organization-Level Roles - Early Access
You can now create roles scoped to individual organizations , without metadata workarounds or custom Actions logic. __What's new__ Auth0 Organizations previously required you to share tenant-wide roles across all your customer organizations.
Organization-to-Application Entitlement - Early Access
**Organization-to-App Entitlement** lets you control which applications the members of an organization can access - natively, without custom code. If you sell multiple products and different customers have purchased different combinations, you can now enforce those boundaries directly in Auth0.
Token Vault Privileged Worker is now Early Access!
We're thrilled to announce __Token Vault Privileged Worker__ is now in __Early Access__, letting your autonomous agents pull a user's third-party tokens - Gmail, Drive, Slack, and more - from Token Vault with no user session required.
Curated Blocklists in Tenant Access Control Lists is Now GA!
### Overview Curated Blocklists extend Auth0 Tenant Access Control Lists (ACLs) by integrating dynamically updated threat intelligence directly into your Tenant ACL rules.