ST-2026-191 · Authentication & identity
Auth0 adds Custom Token Exchange Session Delegation in Open Early Access
Auth0 made Session Delegation through Custom Token Exchange available in Open Early Access on 7 August 2026, enabling an authorized actor to establish a short-lived web session as another user while preserving actor and subject identity in the delegated session.
Previous state
Auth0 Custom Token Exchange supported delegated authorization without the announced Session Delegation web-session flow.
Current state
Eligible Auth0 customers can use Session Delegation through Custom Token Exchange to establish a delegated web session with preserved subject and actor identity, short-lived session controls and dedicated audit events.
Affected users
Who needs to care
Auth0 Enterprise, B2B Professional and B2C Professional customers evaluating delegated web-session use cases.
Required response
What to do
Treat the capability as Open Early Access and validate delegation policy, audit events and session guardrails before depending on it in production workflows.
Evidence boundary
What the source does not prove
The source proves Open Early Access availability and the described Session Delegation mechanics. It does not establish general availability, mandatory adoption or applicability outside the customer tiers named by Auth0.
Lifecycle history
Dated event sequence
- Session Delegation enters Open Early Access
Auth0 announced Session Delegation through Custom Token Exchange in Open Early Access.
Evidence ledger
First-party sources
- 01Auth0 — Custom Token Exchange - Session Delegation is now available in Open Early Access
Official Auth0 changelog · 2026-08-07
Open official source ↗