Authorization Challenges in a Multitenant System

Most SaaS solutions use multitenancy so that multiple organizations can sign up. Each customer becomes a ‘tenant’ in the system with their own set of user accounts. Security policies always need to be conscious of the currently selected tenant, even if they’re performing role-based authorization checks.