Model B2B multi-tenancy with Auth0 Organizations

Steps

1. Enable Organizations in your Auth0 tenant and create an organization per customer using the Auth0 Management API POST /api/v2/organizations with a unique name and display_name.
2. Associate one or more connections to each organization using POST /api/v2/organizations/{orgId}/enabled_connections; this controls which identity sources members of that organization can authenticate with.
3. Invite or directly add members to the organization using the members or invitations endpoints; assign organization-level roles using POST /api/v2/organizations/{orgId}/members/{userId}/roles.
4. Configure your application's universal login to accept an organization parameter (or use organization discovery from email domain) so users are routed to the correct org at login time.
5. In the ID token, the org_id and org_name claims identify the organization the user authenticated through; validate these claims in your application to enforce tenant isolation.
6. Use Auth0 Actions on the post-login trigger to add additional organization-specific claims or to enforce organization-level policies such as MFA requirements.