Auth0

Recently shipped Google One Tap early access, third-party app support for organizations GA, and Dashboard search for Roles beta.

Delegated authorization for AI agents landed in early access via Custom Token Exchange: the act claim preserves both the acting principal's identity and the user's. MCP authentication shipped end-to-end with GA, bundling Client ID Metadata registration and On-Behalf-Of token exchange.

Token Vault gained organization support in GA, scoping tokens to (user, org_id) for multi-tenant data isolation. Third-party applications now work with Organizations — tenant admins block or allow access per org, and user consent is scoped to each organization. M2M access reached GA for strict third-party applications with organization-scoped tokens. Refresh Token Metadata and management reached GA — attach 25 custom key-value pairs per refresh token, with new endpoints for search and bulk revocation of up to 100 tokens in Early Access. Non-Unique Emails also reached GA for new database connections.

Enterprise connection security broadened: DPoP sender constraining for Okta and OIDC connections reached GA, federated logout terminates upstream IdP sessions, and IPSIE session_expiry claim support enforces upstream session ceilings on Auth0 session lifetimes. Private Key JWT and additional signing algorithms are live. Passkey RPID customization reached GA, enabling cross-subdomain authentication.

Google One Tap support arrived in Early Access for Universal Login — users sign in with a single tap via a non-intrusive identity overlay, eliminating manual forms and redirects.

Provisioning expanded: Inbound SCIM Groups for enterprise connections reached GA, and Google Workspace directory sync for groups is now available without enrollment, with native group-to-role mapping. Outbound SCIM provisioning via Event Streams shipped in Early Access — an infrastructure-free Action template pushes user events to any SCIM 2.0-compliant downstream.

Platform tooling saw updates: Dashboard search extended to APIs and Roles in beta, a new Tenant Log Catalog provides interactive log event schema exploration, and Dashboard Navigation & IA Refresh is in Beta. Tenant ACLs gained canonical hostname routing and connecting IP verification.