●Change8

Migrating to Auth0 6.0.0

Version 6.0.0 introduces 7 breaking changes. This guide details how to update your code.

Released: 7/15/2026

7
Breaking Changes
6
Migration Steps
43
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

`ConnectionAttributeIdentifier``EmailAttributeIdentifier``PhoneAttributeIdentifier``UsernameAttributeIdentifier``EmailAttribute.identifier``PhoneAttribute.identifier``UsernameAttribute.identifier``PhoneProviderProtectionBackoffStrategyEnum``ListRolesOffsetPaginatedResponseContent``pydantic.ValidationError``users.federated_connections_tokensets``FederatedConnectionTokenSet``ConnectionFederatedConnectionsAccessTokens``ConnectionOptionsAzureAd``ConnectionOptionsCommonOidc``ConnectionOptionsGoogleApps``ConnectionPropertiesOptions``UpdateConnectionOptions``OauthScope``ClientSessionTransferDelegationDeviceBindingEnum``organizations.roles.members.list``organizations.roles``organizations.roles.members``ListOrganizationRoleMembersResponseContent``RoleMember``UserGrant.organization_id``ConnectionsDiscoveryUrl``ConnectionsOidcMetadata``EventStreamEventTypeEnum``EventStreamDeliveryEventTypeEnum``EventStreamSubscribeEventsEventTypeEnum``EventStreamTestEventTypeEnum``EventStreamCloudEventConnectionCreated``EventStreamCloudEventConnectionDeleted``EventStreamCloudEventConnectionUpdated``EventStreamSubscribeEventsResponseContent``TokenVaultPrivilegedAccessGrant``NotFoundErrorBody``NotFoundErrorBodyError``TooManyRequestsErrorBody``TooManyRequestsErrorBodyError``EventStreamCloudEventSpecVersionEnum``NetworkAclMatch`

Breaking Changes

●Issue #1

`ConnectionAttributeIdentifier` removed and split into three types: `EmailAttributeIdentifier`, `PhoneAttributeIdentifier`, and `UsernameAttributeIdentifier`. The `identifier` field on each attribute now points to its respective new type. Use `EmailAttributeIdentifier` as a drop-in replacement for the old `ConnectionAttributeIdentifier`.

●Issue #2

`PhoneProviderProtectionBackoffStrategyEnum` changed from `Literal["exponential", "none"]` to `Literal["exponential", "default"]`. Replace the value `"none"` with `"default"`.

●Issue #3

`ListRolesOffsetPaginatedResponseContent.start`, `.limit`, and `.total` are now required `float` instead of `Optional[float] = None`. Deserializing a role-list response missing these fields will now raise `pydantic.ValidationError`.

●Issue #4

The `users.federated_connections_tokensets` client and its `list`/`delete` methods, along with `FederatedConnectionTokenSet` and `ConnectionFederatedConnectionsAccessTokens` types, have been removed.

●Issue #5

The `federated_connections_access_tokens` field has been removed from `ConnectionOptionsAzureAd`, `ConnectionOptionsCommonOidc`, `ConnectionOptionsGoogleApps`, `ConnectionPropertiesOptions`, and `UpdateConnectionOptions`.

●Issue #6

OAuth scopes `read:federated_connections_tokens` and `delete:federated_connections_tokens` are no longer valid values of `OauthScope`.

●Issue #7

`ClientSessionTransferDelegationDeviceBindingEnum` has been narrowed, removing the `"asn"` value. The enum now only accepts `"ip"`.

Migration Steps

  1. 1
    Replace `"none"` with `"default"` for `PhoneProviderProtectionBackoffStrategyEnum`.
  2. 2
    Ensure `start`, `limit`, and `total` fields are present when deserializing role-list responses.
  3. 3
    Remove usage of `users.federated_connections_tokensets` client and its methods.
  4. 4
    Remove the `federated_connections_access_tokens` field from relevant connection option types.
  5. 5
    Update OAuth scopes to remove `read:federated_connections_tokens` and `delete:federated_connections_tokens`.
  6. 6
    Update `ClientSessionTransferDelegationDeviceBindingEnum` to only use `"ip"`.

Release Summary

This major release introduces new endpoints, type changes, and significant breaking changes including the removal of federated connections tokensets and the restructuring of connection attribute identifiers. Review the breaking changes carefully before upgrading.

Need More Details?

View the full release notes and all changes for Auth0 6.0.0.

View Full Changelog