Active context Contoso Demo
PP Public Preview Read only · mock sign-in

Management / Authorized context

Customers & tenants

The server-side authorized demo tenant set. Browser input never grants access to another customer context.

1 demo tenants Read-only mock

Authorized tenants

T
1Server-side demo allowlist

Customer records

C
1Synthetic customer contexts

Connected tenants

◇
0No Microsoft connection

External changes

!
0Read-only phase 1 shell

Authorized demo tenants

Every domain uses the reserved .invalid suffix

Server validated
TenantCustomer contextManaged devicesOpen actionsConnection
Contoso Democontoso-demo.invalidcustomer-contoso31217Not connected

Context enforcement

Current phase 1 behavior

  • Tenant selection is checked by the application service
  • Unknown tenant identifiers are denied
  • Organization, customer, role, and tenant assignments come from PostgreSQL

Onboarding

Available in a later roadmap phase

＋No onboarding action yet

Admin consent, GDAP, credential storage, and audit logging must be designed first.