Case study / EntraBook

Central OAuth for a multi-tenant SaaS

Designing a secure sign-in handoff between central identity and tenant subdomains.

OAuth
Security
Node.js
SQL Server

Context

EntraBook is a deployed multi-tenant booking SaaS for court sessions, classes, and property rentals, with tenant isolation and a unified sign-in journey.

Constraint

Authentication and tenancy must be designed deliberately across subdomains while keeping private operational details out of public documentation.

Architecture

The deployed stack combines a React frontend, Node.js and Express services, SQL Server, and OAuth2/OIDC/JWT sessions across tenant subdomains.

Security

The implementation uses HMAC-protected state, host-only cookies, and refresh-token rotation. Private operational details remain excluded from this public case study.