Auth0 deprecations

Upcoming

• Oct 23, 2026in 5 days
  Third-party application creation default security mode

  From 2026-10-23, new third-party apps created via POST /api/v2/clients without a security mode get strict enhanced security automatically.

  Breaking change
• Nov 18, 2026in 31 days
  Rules and Hooks

  Rules and Hooks stop executing and are removed after 2026-11-18; migrate to Actions.

  Shutdown
• Jan 20, 2027in 94 days
  Legacy Custom DB User Import behavior

  Custom database user imports will fully import users immediately on password reset or blocked first login instead of partial imports, from 2027-01-20.

  Breaking change
• Mar 4, 2027in 137 days
  Uncapped user profile data (10KB limit)

  User profiles above a 10KB limit are deprecated as of 2027-03-04; oversized profiles within the extended allowance still succeed with warnings.

  Deprecation