Auth0

Shipped Agents as Principal Early Access, Privileged Worker for background token access, and Organization-to-App Entitlement control.

AI agents gained first-class identities in Auth0. Every agent now has its own principal identifier, credentials, and audit trail — replacing shared client or user identity stand-ins. Agent delegation (who authorized which agent through which app) is encoded in tokens and auditable end-to-end.

Background workers can pull user tokens without a session. Privileged Worker Early Access lets autonomous agents authenticate with Private Key JWT or mTLS and request a specific user's third-party tokens from Token Vault — no active user session required. Each worker credential can be pinned to specific connections and scopes.

Organizations got native app entitlement and scoped roles.

• Organization-to-App Entitlement Early Access blocks access to applications that an org's members aren't entitled to — no custom Actions or metadata checks.
• Organization-Level Roles Early Access creates, updates, and assigns roles scoped to individual organizations via the Management API or Dashboard.
• Dashboard search extended to Organization Members in Beta.

Enterprise Connect Beta opens modular B2B federation. Auth0 can act as a modular identity layer over existing SAML/OIDC authorization servers, adding enterprise SSO, self-service onboarding, and outbound SCIM provisioning guided by a setup wizard.

Cross App Access (XAA) entered Open Early Access as a new standard for passing authorization across domains — centralizing IT control over agent-to-app and app-to-app connections without consent fatigue.

Curated Blocklists for Tenant ACLs reached GA, integrating dynamically updated threat intelligence categories (low reputation, TOR, proxy, VPN, iCloud Private Relay) directly into network rules.

Platform tooling roundup:

• Global Search in Cmd+K (Beta) searches Applications, APIs, Organizations, and Users by plain text.
• Actions Reference Catalog launched in Auth0 Docs.
• Tenant Log Catalog provides interactive log event schema exploration.
• Google One Tap for Universal Login entered Early Access.