LoginSign Up
← Back to all sparks
Auth0 logo

Auth0

INFRA · APISDEVOPS
Velocity10.0

Authentication and authorization platform

auth0.com ↗

Auth0 hands tenants a throttle on their own noisy apps

identityrate-limitingagent-identitytenant-controlsearly-access
◆Current state
Custom Rate Limits enter Early Access, letting a tenant cap requests per second for individual clients or whole classes of them — third-party, CIMD — so one application cannot exhaust the tenant's Authentication API rate limit entitlement. Policies are configured through an API and can be rolled out in notify-only mode before they start blocking. It arrives in a dense window that also brought Flexible Password Policy to GA and Custom Prompts parity across social and enterprise connections.
◆Where it's heading
Two threads dominate. One is agent and delegation infrastructure — Agents as Principal, Token Vault Privileged Worker, Custom Token Exchange session delegation — all still in Early Access. The other is tenant self-service: rate limits, blocklists, organization search and roles, global search. Auth0 is systematically converting things that required support intervention into API-configurable policy.
◆Prediction
The Early Access items now stacking up, particularly the agent-identity pieces, are the obvious GA candidates next, following the Flexible Password Policy path from Early Access to general availability.

◆Recent moves

  1. 2d ago

    Custom Rate Limits let tenants cap per-client request rates

    Self-service throttling for individual clients, so a single noisy app cannot consume a tenant's whole Authentication API entitlement. It fits the tenant-controls thread rather than the agent-identity one, and the notify-before-block rollout mode is what makes it usable in production.

  2. 6d ago

    Flexible Password Policy is now generally available

    Flexible Password Policy reaching general availability, one of the Early Access items from earlier in the cycle graduating.

  3. 9d ago

    Custom Prompts now capture the same fields on Social and Enterprise connections

    Custom Prompts now capture the same fields on social and enterprise connections, closing a parity gap in the login experience.

  4. 12d ago

    Custom Token Exchange - Session Delegation is now available in Open Early Access

    ⚡ SPARK

    Custom Token Exchange with session delegation entering Open Early Access — part of the delegation infrastructure this window keeps building out.

  5. 13d ago

    Google Workspace Directory Sync for Groups - Now in General Availability!

    Google Workspace Directory Sync for Groups reaching GA, extending directory integration breadth.

  6. 15d ago

    Organizations Search Expands with Advanced Filtering

    Advanced filtering in Organizations search, continuing the self-service administration thread.