releases.shpreview
Auth0/Auth0 Changelog/Custom Token Exchange now available in Open Early Access

Custom Token Exchange now available in Open Early Access

December 18, 2025Auth0 Changelog
$npx -y @buildinternet/releases show rel_wr-lbVbowSgGTLwDgIOFC

We’re excited to announce the Open Early Access (EA) of Custom Token Exchange. OAuth 2.0 Token Exchange allows to trade one security token for another (typically an Access Token). With Custom Token Exchange, you can run Auth0 Actions as part of that exchange, giving you a flexible way to inject custom logic and implement your own authentication and authorization semantics. This lets you validate and authorize the request, and precisely set the user for every token exchange transaction.

Key highlights of this release:

  • Automatic Entitlement: The feature is now automatically available to all Enterprise and B2B Pro customers to be used for testing and production (no manual enablement required).
  • Organizations Support: Full compatibility with Organizations. You can now pass the organization parameter in the request or use the new setOrganization function within your Action.
  • Enhanced Security: Includes Multi-Factor Authentication (MFA) support during the exchange.

CTE-Orgs-sample-code.png

To learn more, read the reference documentation.

Fetched April 14, 2026