Description
When an independent software vendor (ISV) submits an app to the Autodesk App Store with a single Client ID, all customers share identical credentials creating data leakage risks. This session will introduce the "robot-per-tenant" pattern: provisioning unique robot email addresses per customer (for example, acme-mep-robot@clientid.com), which ensures token scope isolation at the identity level. We'll cover onboarding flows, three-legged OAuth (3LO) token management scoped per tenant, Hub/Project membership automation, and audit trail design. Even application logic errors cannot breach tenant boundaries. Drawing from production deployments with Forma Data Management and Forma Admin APIs, learn how to scale from 10 to 1,000 tenants.
Key Learnings
- Learn about the data leakage risks of sharing a single Client ID across multiple App Store customers.
- Learn how to implement the "robot-per-tenant" pattern to isolate customer data at the identity level.
- Learn how to automate tenant onboarding flows, including robot provisioning, Hub/Project membership, and token scoping.
- Learn how to design audit trails and credential rotation strategies that scale to 1,000+ tenants.
Tags
Product | |
Industries | |
Topics |