title: Multi-organization solution with identityserver4
body: <p>I've got following setup:</p>
  <ul>
  <li>IdentityServer4 using asp.net core identity</li>
  <li>Accounts app - where user can edit his account data and users can register</li>
  <li>Portal - where users can login and select an organization to which they're connected (same as in azure devops)</li>
  <li>API that is used by portal</li>
  </ul>
  <p>Does anyone have experience setting up something similar ? My question would be how to authorize the calls at API level to make sure he is only editing entities that belong to his organization.</p>
  <p>Thanks !</p>