202602

Session Metadata allows you to attach custom key-value data to a user's session using Actions or the Auth0 Management API, persisting contextual data throughout the session lifecycle.

Key capabilities:

• Set and retrieve metadata in Actions via api.session.setMetadata() and event.session.metadata
• Manage metadata via Management API with GET and PATCH on /api/v2/sessions/{id}
• Delete individual keys or evict all metadata
• Include session metadata in OIDC Back-Channel Logout tokens

Limits:

• Maximum 25 key-value pairs per session
• Each key and value must be a string with max 255 characters
• Metadata stored as flat JSON object (no nesting)

Use Cases:

• Self-service device management
• Keep Me Signed In preferences
• Organization context persistence
• Audit and compliance tracking

No API or behavior changes from Early Access.