ST-2026-193 · Authentication & identity
Auth0 Token Vault Privileged Worker enters Early Access
Auth0 announced Token Vault Privileged Worker in Early Access on 30 July 2026, allowing a registered worker identity to request a specified user's third-party token without an active user session, subject to configured connection and scope restrictions.
Previous state
Auth0 Token Vault assumed an active signed-in user for the described third-party token exchange flow.
Current state
A trusted worker identity can authenticate with Private Key JWT or mTLS and request a specified user's third-party token without an active user session, within configured connection and scope limits.
Affected users
Who needs to care
Auth0 customers evaluating background or scheduled agent workflows that need controlled third-party token access through Token Vault.
Required response
What to do
Treat the capability as Early Access, request enablement through the Auth0 account team where available, and constrain worker credentials to the minimum required connections and scopes.
Evidence boundary
What the source does not prove
The source proves Early Access and the described worker-identity token exchange. It does not establish general availability, automatic tenant enablement or unrestricted third-party token access.
Lifecycle history
Dated event sequence
- Privileged Worker enters Early Access
Auth0 announced Token Vault Privileged Worker in Early Access.
Evidence ledger
First-party sources
- 01Auth0 — Token Vault Privileged Worker is now Early Access!
Official Auth0 changelog · 2026-07-30
Open official source ↗