Releasesby GlyphNew Deny All Rule for Tenant ACL
You can now configure a Deny All rule within your Tenant Access Control List (ACL) to reject all incoming traffic to your assigned scope. By utilizing the new `match_all: true` attribute, this rule bypasses specific signal matching (such as IP or geolocation) to apply comprehensive protection across the full tenant scope.
Also shipped Sep 8, 2026Okta in September 2026 →
Conversational analytics now supports predictive modeling questions using the AI.PREDICT function
Conversational analytics now supports predictive modeling questions using the AI.PREDICT function . This feature is in Preview .
Add and drop hybrid table constraints online (General availability)
With this release, you can add and drop UNIQUE and FOREIGN KEY constraints on an existing hybrid table by using alter table . Previously, you had to define these constraints when you created the table, so adding a foreign key to a table that was already serving a workload meant recreating and reloading the table.
Shadow traffic for gateways (Preview)
With this preview release, you can use a shadow traffic gateway to send all production requests to a primary service endpoint while mirroring a percentage of those requests to one or more shadow endpoints. Responses from shadow endpoints aren't returned to clients.
The partner-powered AI features setting will be removed
On November 1, 2026, Databricks will remove the account- and workspace-level toggle for partner-powered AI features. Each workspace will keep its current setting value: if the setting is enabled, it stays enabled, and if it's disabled, it stays disabled. Removing the toggle doesn't change any setting values.
Incremental ingestion for Salesforce formula fields in Lakeflow Connect will soon be generally available
Incremental ingestion for Salesforce formula fields in Lakeflow Connect will soon be generally available. Today, Lakeflow Connect ingests formula fields by taking a full snapshot on each pipeline run by default. When incremental formula field ingestion is generally available, full snapshots will no longer be the default.
ABAC DENY policies are in Beta
ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access-management operations. They always take precedence over any grant. For details, see ABAC DENY policies (Beta) .
More from Auth0Every Auth0 release →
My Organization API and Embeddable UI Components - XAA and third-party app access configuration in Early Acces
We're excited to announce that self-service configuration of Third-Party Application Access and Cross App Access (XAA) is now available through the My Organization API and Embeddable UI Components, in Open Early Access.
Dashboard Navigation & IA Refresh is now in Early Access
 We're excited to announce that the Dashboard Navigation & IA Refresh is now available in Early Access, bringing a redesigned sidebar, improved information architecture, consistent, breadcrumbs, and a modernized visual experience to...
Advanced MFA Configurations are now Generally Available
We are happy to announce that Advanced MFA Configurations are now Generally Available! This is a highly awaited capability that allows customers to completely tailor their user's MFA Journeys to their security and UX needs ### With Advanced MFA Configurations you can: Change the period that we will "Remember this device" for MFA purposes, from a minimum of...
Enterprise Connection Events , Early Access
You can now stream real-time notifications when an enterprise connection changes , without polling the Management API. __What's new__ Previously, detecting changes to an enterprise connection (a new SSO connection added, an existing one updated, or one removed) required polling the Management API on a schedule.
B2B Connect - Enterprise in Early Access!
You can now connect your existing authorization server to Auth0 for enterprise SSO, SCIM provisioning, and multi-tenant org management , without migrating your users. __What's new__ B2B Connect Beta let you layer Auth0 enterprise identity on top of your own authorization server.
Cross-App Access Requesting App now in Early Access
We're excited to announce that Auth0 now supports acting as a __requesting application in Cross-App Access flows in Early Access__. Today, every user has to click "Connect your account" for every integration, in every app, one at a time.
My Organization API and Embeddable UI Components - Member Management in Early Access!
We are excited to announce the __Early Access (EA)__ release of __Member Management__ for the __My Organization API and Embeddable UI Components__. Building on the Organization Details and Identity Provider Management foundation, this release gives B2B SaaS developers everything they need to let organization administrators manage their own members , sending...
Custom User ID Assignment with Actions , Early Access
You can now assign a custom `user_id` to new database-connection users at signup by calling the `api.user.setUserId()` method in a `pre-user-registration` Action. Previously, Auth0 automatically generated user IDs in the standard `auth0|<id>` format for new signups.