Hi @jzim
The connection resolver is a good approach.
You can also explicitly specify the connection in the call to /authorize so your internal employees would specify the internal DB, and your clients would each specify their own DB. This approach has the drawback that you can only specify a single connection with that parameter, so if you want to use a DB OR a SAML connection, for example, it doesn’t work.
John