- Adds support for the session_expiry claim on Okta and OIDC Enterprise connections, following the IPSIE SL1 profile.
- Auth0 enforces the session lifetime as the minimum of the IdP claim, tenant absolute expiration, and any Action‑set expiry, automatically ending stale federated sessions.
- Enable via Dashboard or Management API and optionally use a Post‑Login Action to add the final session_expiry to the Auth0 ID token; SAML connections are not supported.
IPSIE session_expiry Claim Support for Okta and OIDC Enterprise Connections
Official Auth0 changelog summary with source attribution, release tags, and community reactions.
Track this Auth0 release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Auth0 release note into a weekly digest for the tools you actually use.
Create digestMore Auth0 changelog updates
Introduces early‑access Custom Rate Limits allowing per‑client or group throttling of Authentication API requests via API‑based self‑service configuration.
Introduces GA Flexible Password Policy replacing legacy settings with a unified `options.password_options` object for granular controls (composition, history, dictionary, profile data).
Custom signup/login fields and consent checkboxes now also apply to Social and Enterprise connections.