Use the organization_id to match a user to a specific data set at login time

[lihua.zhang]

Problem statement

We are building a SaaS application and want to segregate data based on organizations associated with user log-in. Can I use the organization_id to match a user to a specific data set at login time?

Solution

The below community topic explains how to achieve this:

Get user's organization id

When a user authenticates I need their organization id to be included in the jwt token. Does anyone know how to activate that? I have tried adding the metadata at the organization level and that does not automatically add it to the user’s jwt. Adding metadata for every user would not be practical. Does anyone else have an idea or know how to get the organization id into the user’s jwt after auth?

• pass the organization query string parameter to include the org_id claim in the ID Token when making the /authorize request in your app:
  loginWithRedirect({organization: 'org_abc123'})

• inspect the value of the organization_id from either the ID Token or the Access Token, as explained in this document:

Work with Tokens and Organizations

• use the organization_id as part of your application logic.