Auth0 / Auth & identity

Auth0 Third-party application creation default security mode breaking change date

From 2026-10-23, new third-party apps created via POST /api/v2/clients without a security mode get strict enhanced security automatically.

6days left
Change
Breaking change
Effective
Oct 23, 2026
Announced
Apr 23, 2026
Replacement
Explicit third_party_security_mode setting on POST /api/v2/clients
Source
auth0.com
Vendor's words
Enhanced Security for Third-Party Applications. Deprecated : April 23, 2026 End of life : October 23, 2026 Auth0 is introducing enhanced security controls for third-party applications that align with OAuth 2.1 best practices. Starting on the end-of-life date, when you create a new third-party application via POST /api/v2/clients without specifying a third_party_security_mode , Auth0 will apply enhanced security contr…

Add Auth0 dates to calendar Report a correction

More from Auth0

Don't get surprised again

Get the weekly →One email every Friday: what's dying this week and what's newly announced.