Hi @glong
This is a complex setup. Auth0 can certainly do it, either via Organizations or perhaps with account linking and multiple accounts, or even just SSO. Sounds like you will have 3rd party apps (which must federate to your Auth0 tenant).
In particular, choosing “which Joe” has the potential for being used incorrectly. “Joe” is defined by credentials, and I think you are saying a single set of credentials has access to multiple applications. In this case, SSO + silent auth, with some rules customizing the access token should give you what you need. Organizations will help organize (sorry) the B2B aspects.
I’d suggest a Professional Services engagement to architect this, due to the complexity.
John