Microsoft Entra External ID Architecture & Tenant Partitioning Specification

1. Executive Summary

This specification defines the multi-tenant architecture and identity partitioning model for the Event Route Optimiser (ERO) platform using Microsoft Entra External ID (CIAM). It establishes tenant boundaries, Application Registration taxonomy, and developer Git authoring standards.

2. Entra External ID Tenant Partitioning Matrix

To ensure total isolation between non-production environments and live attendee production data, identity infrastructure is partitioned across two distinct Entra External ID tenants:

Environment	Entra Tenant Name	Tenant ID / Domain	Azure Resource Group	App Registration Name	Target Audience
Development	`sknxerodev`	`sknxerodev.onmicrosoft.com`	`rg-sknx-ero-development`	`ero-dev`	Workstation Dev / Inner Loop Mock
Test	`sknxerodev`	`sknxerodev.onmicrosoft.com`	`rg-sknx-ero-test`	`ero-test`	Automated E2E Testing & QA
Support	`sknxeroprod`	`sknxeroprod.onmicrosoft.com`	`rg-sknx-ero-support`	`ero-supp`	Internal Staging / Ops Verification
Production	`sknxeroprod`	`sknxeroprod.onmicrosoft.com`	`rg-sknx-ero-production`	`ero-prod`	Live Festival Attendees

3. Application Registration Naming Rules

All Entra External ID Application Registrations must strictly follow the ero-<env> naming taxonomy:

ero-dev: Registered in sknxerodev tenant. Redirect URIs: http://localhost:4321, http://127.0.0.1:4321.
ero-test: Registered in sknxerodev tenant. Redirect URIs: https://ero-test.synkronyx.cloud.
ero-supp: Registered in sknxeroprod tenant. Redirect URIs: https://ero-supp.synkronyx.cloud.
ero-prod: Registered in sknxeroprod tenant. Redirect URIs: https://ero.synkronyx.cloud, https://synkronyx.cloud.

4. Developer Git Authoring & Identity Governance Rules

All repository commits across Archi1 Laptop and Arch2 Desktop must strictly enforce the authorized developer commit identity:

Git Author Name: peter-neil_digx
Git Author Email: [email protected]

Workstation Configuration Command

bash

git config --global user.name "peter-neil_digx"
git config --global user.email "[email protected]"

Microsoft Entra External ID Architecture & Tenant Partitioning Specification ​

1. Executive Summary ​

2. Entra External ID Tenant Partitioning Matrix ​

3. Application Registration Naming Rules ​