Topics created by sferry

Hi @sferry ,

Welcome to the FusionAuth community!

As far as gathering up all the roles into your JWT, you should be able to do that.

Make sure that your users are registered (in FusionAuth) for all the applications to which they have access. Set up a JWT populate lambda to pull the various roles from the registrations object provided to you and put it into your JWT. You have the user object, which has the registrations object on it, which has all the roles the user is assigned at login time. More on a lambda here: https://fusionauth.io/docs/v1/tech/lambdas/jwt-populate/ Consume the JWT and check for proper authorization.

FYI, if you want architecture advice from FusionAuth engineers, that's available when you buy an edition with support included. More on technical support options here: https://fusionauth.io/technical-support/

HTH.

Dan