Auth & Identity

Drop-in authentication, user management, and identity infrastructure for modern apps.

This week's digestOct 5 – 11, 2026

Clerk's directory sync gets role mapping as Auth0 opens up token scopes

Clerk shipped a role-mapping step for self-serve Directory Sync and let SAML connections trust several signing certificates at once, while Auth0 took access token scope customization for Actions to general availability.

Read the digest70 releases covered

In this issue

01Enterprise identity gets more forgiving

Clerk

Auth03 releases 02Client-side fixes and the iOS session model

Clerk9 releases

EarlierSep 28Auth SDKs ship a security-heavy week of account-takeover fixes and enterprise SSO controls Sep 21Enterprise SSO gets more flexible as middleware patches a credential leak All digests →

Week of Oct 520 releases

DigestClerk's directory sync gets role mapping as Auth0 opens up token scopesRead →

SunOct 11, 20261 release

Daily summary

Auth0 adds visual builder for tenant access control rules

Auth0 launched a guided dashboard for Tenant Access Control List rules, letting admins build policies through step-by-step prompts, sequence them on a visual canvas, and toggle them on or off with one click.

Auth0's new guided Tenant ACL builder under Security > Access Control replaces hand-written policy syntax with step-by-step prompts for scope, entity, and action selection.
Admins can reorder Tenant ACL rules on an interactive visual canvas to control execution priority, and enable or disable any rule with a single click.

Auth01

Tenant ACL rules get guided builder and visual sequencing

Tenant Access Control List rules can now be built through step-by-step prompts under Security > Access Control, reordered on an interactive visual canvas to set execution priority, and enabled or disabled with a single click.

Details

FriOct 9, 202619 releases

Daily summary

Clerk adds role mapping to Directory Sync setup

Clerk's self-serve Directory Sync setup now lets organization admins map identity-provider directory groups to organization roles, with enterprise connection selection added to the redirect callbacks.

Clerk's Directory Sync setup in OrganizationProfile adds a role mapping step, letting admins assign an organization role to each identity-provider directory group, pick a winner when a member belongs to several, and toggle role syncing, with unmapped members keeping the default role.
Clerk's handleRedirectCallback() and AuthenticateWithRedirectCallback gain an enterpriseConnectionsUrl option for choosing among multiple enterprise connections sharing an email domain.
Clerk's Electron bridge now throws a clear error when OAuth sign-in omits the renderer option instead of Electron's "No handler registered" failure, and adds a react/experimental entry point.

Clerk19