CIMD with Dynamic Registration in Early Access
Update2 days agoUnverifiedAdded Oct 23, 2026
Auth0 now supports __CIMD with dynamic registration in Early Access__. MCP clients and AI agents can connect to your tenant without an administrator registering each one first.
Topics: AI agents, MCP, Governance, Security, Observability
More Auth0 releases
Every Auth0 releaseApplication Profiles are available in Early Access
We are excited to announce that application profiles are now available in Early Access. This feature allows you to manage third party applications created and used by AI agents, as well as centralizing management of large numbers of applications in a single configuration point.
Configurable Unblock Mode for Brute Force Protection
We’ve added a new **Unblock Behavior** setting to **Brute-Force Protection** for better compatibility with email scanners. ### What Changed? When an account is locked due to brute-force protection, users receive an email containing a recovery link.
Agent Mode for the Auth0 CLI
Agents are increasingly operating the CLI to configure Auth0 on behalf of developers. The CLI wasn't built for that. A misspelled command could exit `0` like nothing went wrong. A routine re-login could hang forever waiting on a browser click that would never come. Finding the right command meant drilling through `--help` one level at a time.
Improved Bot Detection: Enhanced IPv6 Signal Analysis
### Bot Detection Model Update We have updated our Bot Detection model to improve threat intelligence against fast-rotating distributed bot networks while preserving a seamless user experience.
Universal Login identifier and phone country controls in Early Access
Universal Login's identifier and phone country controls are available in Early Access on all Auth0 plans. Choose type-specific login entry with "Continue with" buttons, or keep the default unified field.
Tenant ACL Dashboard UX
Easily construct, sequence, and audit Tenant Access Control List (ACL) rules using our new intuitive, step-by-step dashboard interface . ### Features #### Guided Rule Builder Construct complex Tenant ACL policies directly under **Security > Access Control** using step-by-step input prompts that simplify scope, entity, and action selection without syntax...
Actions - Access Token Scope Customization - GA
We are excited to announce that __Access Token Scope Customization for Actions is now Generally Available__, and with this release we are __extending support to Post Login Actions__. Credentials Exchange Actions, which had these interfaces in Early Access, are now GA as well.
Upcoming changes to the length of refresh tokens
As part of our commitment to maintaining the highest security and compliance standards, we will soon be updating our authentication service configuration to increase the length and entropy of our refresh tokens. ## What is changing? We are increasing the cryptographic entropy of our issued Refresh Tokens.
Also shipped on Oct 22, 2026
Okta in October 2026Trace and evaluate Cursor agents with Langfuse, powered by ClickHouse
Users can now connect Cursor to Langfuse to trace agent turns and analyze model and tool calls, with ClickHouse providing the underlying analytics infrastructure.
The AI.TRANSLATE function lets you translate text strings between languages
The AI.TRANSLATE function lets you translate text strings between languages. AI.TRANSLATE supports standard Neural Machine Translation (NMT) workloads and Translation LLM (TLLM) capabilities. This function is generally available (GA).
Replit Monitoring Agent: Your very own software engineering team
Replit Monitoring Agent is an autonomous tool that investigates production alerts, identifies causes, applies fixes, and deploys them to production for internal apps.
Microsoft Entra ID connector is available in Beta
The managed Microsoft Entra ID connector is now available in Beta in Databricks Lakeflow Connect. Use the connector to ingest Microsoft Entra ID users, groups, applications, service principals, directory roles, identity configuration, and audit and sign-in logs into Databricks.
You can configure Direct VPC ingress for Cloud Run instances ( Preview )
You can configure Direct VPC ingress for Cloud Run instances ( Preview ). Direct VPC ingress lets Cloud Run instances on a VPC network use their own ephemeral private IP address to communicate with each other and with other resources on the VPC network.
Gemini Enterprise: Single-user quota limits
Gemini Enterprise administrators can configure single-user quota limits on the Usage & Spending > Usage page in the Google Cloud console to prevent an individual user from using all of an edition's shared subscription quota pool.