Hi everyone! Thank you to everyone who contributed to our developer forum in October. Dive into a recap of the latest news, platform updates, Oktane details, and top trending developer topics from the Auth0 Community this month.
LATEST NEWS 
Cookies vs. Access Tokens: Securing the Authorization Code Flow in Browser-Based Apps
Where to store access tokens in your SPA is a commonly debated question in our developer community. Whether you’re building in React, Angular, or Vue, understanding the security trade-offs between localStorage, cookies, and in-memory storage is critical to protecting your users and your application. We break it down in this blog post.
Celebrating our latest Auth0 Certified Developers: August 2026
We love celebrating the achievements of individuals who go above and beyond to master identity and access management. Passing the Auth0 Certified Developer exam demonstrates deep technical knowledge for building secure applications. We’re excited to recognize Auth0 community members, Auth0 customers, and Okta employees who have officially passed the exam and earned their certification. Learn about the latest certified pros.
Oktane 2026 Recap
Oktane was filled with insightful keynotes, sessions, and networking opportunities. Explore this recap blog to see the announced product innovation and a look at the great resources available in the Customer Success Zone.
Auth0 Developer Exam Update
The refreshed Auth0 Developer exam launches in November 2026 with a sharper focus on performance-based assessment and hands-on use cases that reflect real-world Auth0 development skills. Read the full announcement for more details.
PRODUCT UPDATES 
Auth0 Release Highlights
Get the scoop on new, generally available, and early access features to the Auth0 platform. Learn more about the latest updates in Customer Identity and Access Management in the Auth0 Changelog.
TOP TRENDING COMMUNITY TOPICS AND KNOWLEDGE
Looking for expert troubleshooting and real-world solutions? Our community members and Auth0 Community engineers have been actively resolving complex identity edge cases this month. Here is a curated look at the top discussions and knowledge base updates.
Top Community Forum Questions 
Why is the phone not supported as an MFA factor in the Auth0 reset password flow?
- Solution: Phone (SMS and voice) is not supported in the reset password flow because it is designed to be accessible without requiring a user to have pre-enrolled MFA factors. The supported factors in the reset password flow are: otp, email, webauthn-platform, webauthn-roaming, and recovery-code.
-
Solution: This documentation details the upcoming Auth0 third_party_security_mode breaking change.
-
- Solution: Limit the connector’s requested scopes to values your API defines, request the API audience explicitly, and store the client registration returned on first connection so later reconnections reuse it.
How do I see the daily count on the daily active users chart - I just see the date when I hover?
- Solution: The most reliable place to find your active user metrics is in the Auth0 Support Center. Go to the Auth0 Support Center (accessible via the “Get Support” link in your dashboard’s lower-left corner or by clicking your tenant name), and navigate to Reports > Quota Utilization to generate a report of monthly active users.
How to implement secondary account authentication for server-side account linking with Next.js SDK?
- Solution: Use a custom secondary authentication flow that does not use connectAccount or startInteractiveLogin. Instead, initiate a popup-based authentication to the secondary provider, capture the secondary ID token on the frontend, send it to your backend, and have the backend validate it and call the Management API linking endpoint.
Avoiding Duplicate Phone Verification for Signup and MFA
- Solution: To prevent the user from re-entering their phone number, you can bypass the standard interactive Auth0 MFA setup screen by automatically enrolling them via the Auth0 Management API.
Top Knowledge Articles 
Auth0 Terraform Error 403 Forbidden When Creating A Resource Server
- Resolve Error 403 by removing the unsupported online access flags from the Terraform configuration, saving the file, and applying the changes.
Obtain the Passkey Registration Status During Signup in Auth0 Actions
- Retrieve the Auth0 Actions passkey registration status by calling the Management API within a Post User Registration Action using the provided code snippet in the Knowledge Article.
Auth0 Action Logs Access for Non-Admin Dashboard Users
- Assigning all available roles except Admin still results in no access to the Actions execution tab, so assigning the Viewer - Users role provides a workaround to view the execution trace within relevant log events.
Auth0 Login Page Hangs After Missed CAPTCHA Verification
- Modify the page template using the Auth0 CLI to add a script to the section that stops immediate event propagation, or refresh the page to bypass the hang.
Handling Protected Resource Metadata Discovery for Auth for MCP With Auth0
- When implementing Auth for Model Context Protocol (MCP) with Auth0, Protected Resource Metadata (PRM) discovery must be handled by the resource server rather than Auth0. The application must host the specific well-known endpoints to provide the required JSON response containing the resource metadata.
Top Trending Feedback Cards 
Here are the 4 most voted and viewed Product Feedback cards from the last couple of months. Make sure to advocate, add context, and vote for the ones you are interested in!
Custom metadata on organization memberships
The SAML page in Enterprise Connection should have search bar
Allow factor-type restriction together with allowRememberBrowser: false in Actions MFA API
STAY CONNECTED 
Okta Support YouTube Channel
This channel is here to help you discover resources to successfully navigate Okta, save time, and grow your expertise across a range of products. Follow us and connect, grow, and collaborate with an entire community of peers. Subscribe now.
Auth0 Community X
Connect with us on Auth0 Community X (formerly known as Twitter).
Auth0 Community LinkedIn
Discover resources to help you navigate your journey successfully, connect with peers, and grow your expertise. Follow us.
Enjoyed this month’s edition? Let us know what you think in the comments.