Connection based roles for multiple applications

[stephanie.chamblee]

Hi @dstringers,

Welcome to the Community!

@dstringers

1. Give each user in the application one or more roles (which corresponds to the applications they have access to) in the user metadata.
2. Create a Rule which checks the users role upon authentication.
3. Somehow apply one rule for each application.

I think this approach makes sense!

@dstringers

Is it possible to apply a rule to a single application, or do I need to use a global rule to check the application that the request is coming from (via the context variable?)

Unfortunately, rules cannot be applied to individual applications, so you will need to add a check on the context object’s context.clientName property like so:

function ruleForSpecificApp(user, context, callback) {
  // only run rule for NameOfTheApp
  // bypass this rule for all other apps
  if(context.clientName !== 'NameOfTheApp'){
    return callback(null, user, context);
  }
 
  // add rule logic here

  return callback(null, user, context);
}

Here is an FAQ for applying default roles which may be helpful for your implementation:

• How do I add a default role to a new user on first login? - #2