I’d like to use Auth0 for API authorization on a multi-tenant SaaS product. Users in the SaaS product can be part of one or many tenants/companies. They should be authorized automatically for first-party clients, but should need consent for 3rd party clients. What’s the best practice for providing …

Disclaimer: The answer below is an opinionated view on the subject described in the question. Given it’s almost impossible to describe all the assumptions in a single post, take it with a grain of salt. Based on the information you provided and what I know about the API authorization functionality…

Best practice for limiting Multi-Tenant grants for 3rd party Clients? (scoped grants)

Get Help

Topic		Replies	Views
How do you use Auth0 to authenticate & authorize 3rd party vendors? Get Help clients	4	4059	March 2, 2018
Single Auth0, multi-tenant with 3rd party applications Get Help multi-tenant	5	3081	June 8, 2021
Allow third party access to API Get Help	4	4568	January 29, 2022
Access tokens with multiple audiences Get Help jwt , auth0 , api , audience	2	45432	March 19, 2018
OAuth and Multitenancy Get Help auth0 , api	4	8818	August 28, 2019

Best practice for limiting Multi-Tenant grants for 3rd party Clients? (scoped grants)

Related topics