Designing auth for B2B SaaS — orgs, roles, and isolation.
What enterprise customers mean by \"require SSO,\" how domain verification works and why it's dangerous, what happens to existing passwords and personal accounts, service accounts, and the admin lockout you must design against.
Roles, permissions, attributes, and relationships — how each model breaks, the role explosion problem, where the policy decision point belongs, and a migration path that doesn't require rewriting every authorization check.
How to model organizations, users, roles, and isolation when one user can belong to many tenants — and the architectural decisions that are painful to reverse later.
Authentication
Foundations, flows, and patterns for user authentication on the modern web.
BrowseOAuth & OIDC
OAuth 2.0, OpenID Connect, PKCE, and federated identity in depth.
BrowseJWT
Tokens, signatures, claims, and the things that go wrong with JWTs.
BrowseSecurity
Threats, mitigations, and defensive design for auth systems.
BrowsePasswordless
Magic links, OTPs, passkeys, and what to use when.
BrowseReact Auth
Authentication patterns specific to React and SPAs.
Browse