BetterAuth on Railway Postgres
IT Envy identity
EnvyID
Central auth service scaffold for EnvyOS, HelpEnvy, and future client apps. App data stays in each product's Convex deployment; EnvyID owns identity, SSO, SCIM, sessions, and app grants.
Organizations and admin management
SAML/OIDC SSO per tenant
SCIM provisioning surface
OAuth/OIDC provider for EnvyOS, HelpEnvy, and client apps
JWT/JWKS-ready service token path