Notes on auth, hierarchical authorization, EF Core, and practical .NET application security.
The advanced SqlOS topology: one dedicated auth host serving several web, mobile, CLI, and API surfaces with shared users, orgs, SSO, and application access policy.
SqlOS now gives AuthServer and host applications one structured audit trail for governance, support, and customer review.
Auth0, WorkOS, Clerk, or SqlOS? A focused first-fork guide for a single .NET SaaS app that needs login, organizations, SSO later, and row-level authorization.
WorkOS FGA and SqlOS both use hierarchical RBAC ideas. The difference is whether resource authorization lives in WorkOS or in your SQL Server database.
SqlOS MFA starts optional, can be disabled, and can be required globally or per tenant without making every app rebuild the same TOTP state machine.