Securing Your SaaS API

In Organization and Multi-Tenant Authentication we got a user logged into the right organization and made sure their session carries a tenant context that every downstream check can rely on.