Custom Token Exchange is now Generally Available
We are excited to announce that Custom Token Exchange is now Generally Available. This feature is available to all Enterprise, B2B Professional, and B2C Professional customers, as well as part of the Trial period for free tenants.
Also shipped Aug 28, 2026Okta in August 2026 →
Monitor and cap external provider costs
Unity Gateway can now track and cap spend on external model providers, such as Amazon Bedrock and Azure AI Foundry, not just Databricks-provided models. If your organization already has capacity commitments directly with a provider, Unity Gateway becomes the single point to track that usage and enforce spend limits across teams and use cases.
Unity Catalog Skills (Beta)
You can now publish, govern, and share agent skills with Unity Catalog. A skill is a first-class Unity Catalog securable ( catalog.schema.skill ) that follows the SKILL.md specification , so you register it once and control who can discover, use, and update it with the same permissions, tags, and audit that protect your tables.
Looker visual modeling canvas for BigQuery enters preview
A drag-and-drop canvas builds and edits LookML models on BigQuery sources: join tables, define dimensions and measures, preview results and publish Explores without writing LookML.
Conversational Analytics verified queries , also known as golden queries , are now generally available
Conversational Analytics verified queries , also known as golden queries , are now generally available. You can also now define verified queries in Looker (Google Cloud core) instances.
Now available in preview, model localization is supported for imported projects
Now available in preview, model localization is supported for imported projects. By default, Looker uses the locale definitions from the importing project only, if the importing project has locale definitions.
More from Auth0Every Auth0 release →
Cross-App Access Requesting App now in Early Access
We're excited to announce that Auth0 now supports acting as a __requesting application in Cross-App Access flows in Early Access__. Today, every user has to click "Connect your account" for every integration, in every app, one at a time.
Advanced MFA Configurations are now Generally Available
We are happy to announce that Advanced MFA Configurations are now Generally Available! This is a highly awaited capability that allows customers to completely tailor their user's MFA Journeys to their security and UX needs ### With Advanced MFA Configurations you can: Change the period that we will "Remember this device" for MFA purposes, from a minimum of...
Dashboard Navigation & IA Refresh is now in Early Access
 We're excited to announce that the Dashboard Navigation & IA Refresh is now available in Early Access, bringing a redesigned sidebar, improved information architecture, consistent, breadcrumbs, and a modernized visual experience to...
My Organization API and Embeddable UI Components - XAA and third-party app access configuration in Early Acces
We're excited to announce that self-service configuration of Third-Party Application Access and Cross App Access (XAA) is now available through the My Organization API and Embeddable UI Components, in Open Early Access.
New Deny All Rule for Tenant ACL
You can now configure a Deny All rule within your Tenant Access Control List (ACL) to reject all incoming traffic to your assigned scope. By utilizing the new `match_all: true` attribute, this rule bypasses specific signal matching (such as IP or geolocation) to apply comprehensive protection across the full tenant scope.
Custom Rate Limits available in Early Access
Custom Rate Limits allow Auth0 Customers to limit the amount of RPS their first-party, third-party, or CIMD apps can consume, so as to mitigate the risk that any one Client can exhaust the customer’s Tenant Rate Limit Entitlement on their tenant’s Authentication API Rate Limit Policy.
Flexible Password Policy is now generally available
The Flexible Password Policy for database connections is now generally available. The Flexible Password Policy replaces Auth0's legacy password configuration with a single `options.password_options` object, giving you more granular control over how passwords are validated on your database connections: * **Composition** , set a minimum length, require...
Custom Prompts now capture the same fields on Social and Enterprise connections
Your custom signup and login fields and consent checkboxes configured in Universal Login now capture the same data on Social and Enterprise connections as they already do on database and passwordless.