Questions tagged [multi-tenancy]
Multi-tenancy involves a single software instance serving multiple groups, each of which has specific privileges to maintain separation of concerns.
8
questions with no upvoted or accepted answers
3
votes
1
answer
355
views
Multi-tenant SPA with multiple OIDC providers
I'm building a multi-tenant app that has the unusual requirement of allowing tenants to use their own choice of external systems for login/authentication
ie: tenant 1 uses Azure AD, tenant 2 uses ...
- 131
2
votes
0
answers
112
views
Sharing individually encrypted elements between users of a system
I'm creating a file sharing system, in which the unique key of a file is one of the critical components to the retrieval of that file.
For simplicity, lets say the unique keys are the file names.
I'd ...
1
vote
0
answers
222
views
How should SQL Server users be managed for a multi-tenant application?
I've looked extensively for a duplicate question, but I couldn't find anything that answers this question exactly.
I have a SQL Server that will be used to store data for a multi-tenant application. ...
- 111
1
vote
1
answer
288
views
Which OAuth2 flow should I use?
Context
I'm trying to build an hybrid multi-tenant API using OAuth2.0 using Laravel 8 Passport, so my system has 2 parts: one process the request from the tenant application, and the other part ...
- 193
1
vote
1
answer
172
views
Risks associated with a compromised external Security token server
Consider the following architecture:
An on premise Web API 2 [Written in C# hosted in IIS] which uses OAuth 2 authentication [ Implicit Flow ] to secure itself. This API acts as the data source by ...
- 111
1
vote
0
answers
547
views
Does a shared (but encrypted) private key for a group of users reduce the effectiveness of the encryption?
That is, is it generally considered more secure to save a single application-wide private key on the web server compared to storing (protected/encrypted) private keys in the database?
More ...
- 113
1
vote
0
answers
149
views
Security concerns over predictable URLs in a multi-tenant environment
Consider a multi-tenant SaaS application that uses domain names to identify which customer to serve. Customers access the application using client001.ourdomain.com, client002.ourdomain.com, etc. The ...
- 483
0
votes
0
answers
99
views
Secure authentication for sites which allow user to modify js/html
We have a site builder, allows users to add/modify JS/HTML/CSS. Is it possible to provide a global authentication for it?
I mean users login once but can interact with all sites as their own names. ...
- 101