Topic

SSO

2 posts about SSO. Every summary links to the original.

Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.

Newest first

Posts

Auth0
Multi-Tenant SaaS Apps with Auth0 Organizations — Part One
Auth0 Organizations provide an isolated workspace per tenant with dedicated members, identity provider connections, metadata, and role-based access control, addressing enterprise requirements like Acme Corp’s SSO ultimatum. Login flows differentiate between B2C users (no organization parameter) and B2B users (organization parameter scopes connections, branding, and token claims including org_id). Home Realm Discovery automatically matches users to their enterprise IdP by email domain when an organization is set, requiring the Identifier First authentication profile and eliminating password prompts. Authorization is per-organization via org_id claims in access tokens, with organization-level roles and permissions resolved through RBAC. The post also covers invitation tickets, tenant context switching where users obtain new tokens with a different org_id, recommends one Auth0 Organization per app tenant, describes Auth0 Actions for custom metadata, and introduces this as part one of a five-part series on B2B identity.

Auth0
Seven Architectural Readiness Checks Before Production Launch
Auth0’s free tier supports up to 25,000 MAUs for MVPs, but teams must complete seven architecture checks before production launch to avoid blockers. The checks cover Auth0 Organizations for multi-tenancy, Enterprise Connections for SSO, Custom Domains, JIT hash migration, Fine-Grained Authorization, MFA factor progression, and tenant lifecycle management. The free plan caps Organizations at five, Enterprise Connections at one plus unlimited Okta, and MFA at passwordless and passkeys only. Upgrading to B2B Essentials or Professional unlocks unlimited organizations, up to five enterprise connections, and advanced MFA including TOTP, WebAuthn, push, and SMS; Professional also enables Custom Database migration scripts. Teams must add a credit card for Custom Domains, add a secondary admin to prevent tenant deletion after 150 days of inactivity, and note that FGA free trial supports 100 MAUs and 50,000 tuples for prototyping.

The best engineering reads, once a week.

Topic

2 posts about SSO. Every summary links to the original.

Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.

Newest first

Auth0
Multi-Tenant SaaS Apps with Auth0 Organizations — Part One
Auth0 Organizations provide an isolated workspace per tenant with dedicated members, identity provider connections, metadata, and role-based access control, addressing enterprise requirements like Acme Corp’s SSO ultimatum. Login flows differentiate between B2C users (no organization parameter) and B2B users (organization parameter scopes connections, branding, and token claims including org_id). Home Realm Discovery automatically matches users to their enterprise IdP by email domain when an organization is set, requiring the Identifier First authentication profile and eliminating password prompts. Authorization is per-organization via org_id claims in access tokens, with organization-level roles and permissions resolved through RBAC. The post also covers invitation tickets, tenant context switching where users obtain new tokens with a different org_id, recommends one Auth0 Organization per app tenant, describes Auth0 Actions for custom metadata, and introduces this as part one of a five-part series on B2B identity.

Auth0
Seven Architectural Readiness Checks Before Production Launch
Auth0’s free tier supports up to 25,000 MAUs for MVPs, but teams must complete seven architecture checks before production launch to avoid blockers. The checks cover Auth0 Organizations for multi-tenancy, Enterprise Connections for SSO, Custom Domains, JIT hash migration, Fine-Grained Authorization, MFA factor progression, and tenant lifecycle management. The free plan caps Organizations at five, Enterprise Connections at one plus unlimited Okta, and MFA at passwordless and passkeys only. Upgrading to B2B Essentials or Professional unlocks unlimited organizations, up to five enterprise connections, and advanced MFA including TOTP, WebAuthn, push, and SMS; Professional also enables Custom Database migration scripts. Teams must add a credit card for Custom Domains, add a secondary admin to prevent tenant deletion after 150 days of inactivity, and note that FGA free trial supports 100 MAUs and 50,000 tuples for prototyping.

The best engineering reads, once a week.