Ready to post? 
First try searching for your answer.We recently received the notification regarding the upcoming change where newly created third-party applications will default to strict mode when third_party_security_mode is not explicitly specified during client creation.
We have a few questions:
- How can a tenant determine whether it is actually impacted by this change?
- Are notification emails sent to all tenants, or only to tenants that have existing third-party applications that may be affected?
- If a tenant does not create third-party applications through the Management API (
POST /api/v2/clients), is any action required before the enforcement date? - Is there a recommended way to identify existing third-party applications that may rely on the current permissive behavior?
- For tenants with no impacted applications, is this notification purely informational, or are there any migration or validation activities that should still be completed?
Any clarification from the Auth0 team or community members would be appreciated.