# \#architecture

**URL:** https://community.auth0.com/tag/architecture/175.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [AI Agents Have Two Souls. You Only Control One](https://community.auth0.com/t/ai-agents-have-two-souls-you-only-control-one/199759)

<div class="topic-metadata">

**Author:** [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Replies:** 1\
**Last updated:** [May 9, 2026, 7:40am UTC](https://community.auth0.com/t/ai-agents-have-two-souls-you-only-control-one/199759 "2026-05-09T07:40:17Z")

</div>

From a security perspective, the code around the LLM matters more than the LLM itself: learn about the two souls of an AI agent. Read more…

---

## [Is there any good practice when we consider to manage like this data structure on Auth0?](https://community.auth0.com/t/is-there-any-good-practice-when-we-consider-to-manage-like-this-data-structure-on-auth0/33774)

<div class="topic-metadata">

**Author:** [@roshihy](https://community.auth0.com/u/roshihy)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 1:26am UTC](https://community.auth0.com/t/is-there-any-good-practice-when-we-consider-to-manage-like-this-data-structure-on-auth0/33774 "2020-02-05T01:26:27Z")

</div>

Hello hello! We provides SaaS base CRM services which integrated with communication mobile app like LINE(Famous one in Japan.). Because current architecture doesn’t support to manage user identity and associated authori…

---

## [SPA + API + Business Backend APIs](https://community.auth0.com/t/spa-api-business-backend-apis/8866)

<div class="topic-metadata">

**Author:** [@pattyn.kurt](https://community.auth0.com/u/pattyn.kurt)\
**Replies:** 1\
**Last updated:** [December 28, 2017, 10:36pm UTC](https://community.auth0.com/t/spa-api-business-backend-apis/8866 "2017-12-28T22:36:45Z")

</div>

We have a number of APIs that expose common services to business information. E.g. APIs that expose customers, billing information, licenses. Customers can of course only access their own billing information, licenses …

---

## [Choice of authentication flow](https://community.auth0.com/t/choice-of-authentication-flow/9040)

<div class="topic-metadata">

**Author:** [@priya.sharma.9362](https://community.auth0.com/u/priya.sharma.9362)\
**Replies:** 4\
**Last updated:** [December 21, 2017, 9:25pm UTC](https://community.auth0.com/t/choice-of-authentication-flow/9040 "2017-12-21T21:25:55Z")

</div>

We want to establish a secure authentication flow for between our API and client applications. For this, we are thinking of using the resource owner password grant, wherein each user will provide their email and passwor…

---

## [Using Auth0 to authenticate against multiple resources with a single application login](https://community.auth0.com/t/using-auth0-to-authenticate-against-multiple-resources-with-a-single-application-login/8704)

<div class="topic-metadata">

**Author:** [@john.dibling](https://community.auth0.com/u/john.dibling)\
**Replies:** 0\
**Last updated:** [November 13, 2017, 5:30pm UTC](https://community.auth0.com/t/using-auth0-to-authenticate-against-multiple-resources-with-a-single-application-login/8704 "2017-11-13T17:30:51Z")

</div>

My app is authenticated using Auth0. The user enters their username + password and Auth0 gives back a token which my app uses to call my backend. My app also uses 3rd party applications behind the scenes, and those 3rd …

---

## [Implementation Advice and what is possible with Auth0](https://community.auth0.com/t/implementation-advice-and-what-is-possible-with-auth0/7683)

<div class="topic-metadata">

**Author:** [@Mark\_Redman](https://community.auth0.com/u/Mark_Redman)\
**Replies:** 2\
**Last updated:** [August 28, 2017, 6:23pm UTC](https://community.auth0.com/t/implementation-advice-and-what-is-possible-with-auth0/7683 "2017-08-28T18:23:28Z")

</div>

Hi All, We use Auth0 to secure mult-tenant SaaS based site, this works well for username and password authentication, no issues there. (This is a .Net Core implementation, using the new OIDC compliant method) In additi…

---

## [Multi tenant architecture](https://community.auth0.com/t/multi-tenant-architecture/6873)

<div class="topic-metadata">

**Author:** [@markg](https://community.auth0.com/u/markg)\
**Replies:** 2\
**Last updated:** [August 21, 2017, 12:44pm UTC](https://community.auth0.com/t/multi-tenant-architecture/6873 "2017-08-21T12:44:56Z")

</div>

I’m confused as to how best use auth0 to implement the following multi tenant scenario User logs in with Native App (WPF application) and is logged into specific tenant (or given a list if more than one available) Nati…

---

## [Advisability of using a JWT with a custom implementation for token issuance?](https://community.auth0.com/t/advisability-of-using-a-jwt-with-a-custom-implementation-for-token-issuance/6628)

<div class="topic-metadata">

**Author:** [@cbmarb](https://community.auth0.com/u/cbmarb)\
**Replies:** 3\
**Last updated:** [May 16, 2017, 7:50pm UTC](https://community.auth0.com/t/advisability-of-using-a-jwt-with-a-custom-implementation-for-token-issuance/6628 "2017-05-16T19:50:44Z")

</div>

We have a simple requirement at this time to replace username/password authentication on our web services with authentication using a token. Our customers do not want their web services to be disrupted by password polic…

---

## [Best practice for limiting Multi-Tenant grants for 3rd party Clients? (scoped grants)](https://community.auth0.com/t/best-practice-for-limiting-multi-tenant-grants-for-3rd-party-clients-scoped-grants/6218)

<div class="topic-metadata">

**Author:** [@Logan](https://community.auth0.com/u/Logan)\
**Replies:** 2\
**Last updated:** [April 19, 2017, 12:40am UTC](https://community.auth0.com/t/best-practice-for-limiting-multi-tenant-grants-for-3rd-party-clients-scoped-grants/6218 "2017-04-19T00:40:27Z")

</div>

I’d like to use Auth0 for API authorization on a multi-tenant SaaS product. Users in the SaaS product can be part of one or many tenants/companies. They should be authorized automatically for first-party clients, but sho…
