Manage users with Multi-Tenant Access

[wlandgraf (Wagner Landgraf)]

@Julio_R_Ferrari

Shouldn't it be managed at security level?

I don't think so.
If the same user, with same credentials (unique e-mail/phone number and password), can access both "Tenant 1" and/or "Tenant 2", it's not a security issue. It's an UI/filter issue.

@Weetch_Russell

The process I am thinking of is that the user logs in and then selects the TenantId that they want to work with. We then need to add this to the JWT, but the configure token will be complete before the list is shown.

Yes, but then this is UI. The original JWT token generated by Sphinx (actually, generated by you from Sphinx) says the user can have access to Tenant 1 and Tenant 2. If you want your app to only show data from Tenant 1, it's up to your app.