IT Envy identity

EnvyID

Central auth service scaffold for EnvyOS, HelpEnvy, and future client apps. App data stays in each product's Convex deployment; EnvyID owns identity, SSO, SCIM, sessions, and app grants.

BetterAuth on Railway Postgres

Organizations and admin management

SAML/OIDC SSO per tenant

SCIM provisioning surface

OAuth/OIDC provider for EnvyOS, HelpEnvy, and client apps

JWT/JWKS-ready service token path