
Multi-tenancy by construction, Part 5: Identity is not tenancy
Why the identity provider should know nothing about tenants, why memberships don't belong in the access token, and how a per-request lookup with a two-tier cache makes role changes apply in seconds.

