---
schema_version: "1"
id: 17f205b39f34e180e4fc54ff2ac45a37067a67218c81bb59e748ded941ec27ab
title: OpenID Connect OAuth 2.0 Token Enforcement
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/release-notes/gateway/policies/openid-token-enforcement-release-notes.md
canonical_url: https://docs.mulesoft.com/release-notes/gateway/policies/openid-token-enforcement-release-notes
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 9439c4efffc9d9d81922cb1754a0c6cd1e00e56cbc737f26dd0f348db03bd20f
description: MuleSoft Documentation Site
latest: true
---
---
product: Release Notes
version: master
keywords: release notes, omni gateway, policies, openid token enforcement
---

# OpenID Connect OAuth 2.0 Token Enforcement

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

The OpenID Connect OAuth 2.0 Token Enforcement policy allows access only to authorized client
applications.

For configuration details, see
[OpenID Connect OAuth 2.0 Token Enforcement Policy](https://docs.mulesoft.com/gateway/latest/policies-included-openid-token-enforcement).

## September 2, 2026

### What’s New

- The **Validated Token TTL** (`maxFederationExpirationTime`) and **Maximum Cache Entries**
  (`maxCacheSize`) settings are now exposed in Connected Mode, so you can control how long validated
  tokens are cached and how many are stored from the policy configuration.

  See
  [OpenID Connect OAuth 2.0 Token Enforcement Policy](https://docs.mulesoft.com/gateway/latest/policies-included-openid-token-enforcement).

- OpenID Connect OAuth 2.0 Token Enforcement policy implementation version 1.5.0 is now supported by
  Omni Gateway.

- OpenID Connect OAuth 2.0 Token Enforcement policy definition version 0.11.0 is now supported by
  Omni Gateway.

## February 27, 2025

### What’s New

- OpenID Connect OAuth 2.0 Token Enforcement policy implementation version 0.9.0 is now supported by
  Omni Gateway.

- OpenID Connect OAuth 2.0 Token Enforcement policy definition version 0.9.0 is now supported by
  Omni Gateway.