Evidence boundary: Modern TLS 1.2 and TLS 1.3 remain supported. The change removes only the listed weak cipher suites.
What changes
Clients that can negotiate Auth0 only through the removed cipher suites can no longer establish a TLS session.
Who is affected
- Legacy operating systems and runtimes with limited cipher support.
- Old network appliances, SDKs or embedded clients connecting to Auth0 endpoints.
- Integrations whose TLS compatibility has not been tested against current cipher policy.
Timeline
The removal was enforced on 10 June 2026.
Required action
- Test affected clients against Auth0 endpoints using current TLS tooling.
- Upgrade runtimes, libraries or appliances that cannot negotiate a supported cipher.
- Remove assumptions that TLS 1.2 alone guarantees compatibility.
What is not affected
Clients supporting modern TLS 1.2 cipher suites or TLS 1.3 continue to connect.
PlatformTrace analysis
This is a compatibility boundary at the transport layer: application code may be unchanged while the connection still fails before authentication begins.
Sources
Corrections and updates
No correction is currently open. Further TLS-policy changes will be recorded as separate dated events.