Introduce accessing organization and user resident organization attributes for the authenticated user.

[sadilchamishka]

Proposed changes in this pull request

A new attribute called accessingOrganization & userResidentOrganization are introduced to the AuthenticatedUser object, which keeps the ID of the organization where the B2B user is authorized to access and the organization where the user's identity is managed.

For federated users who login via the organization SSO authenticator (for B2B use cases), the user_organization claim is set in the user attributes by the authenticator. That value is taken as the authorizedOrganization as that organization where the B2B user intend to access. For other cases like B2C logins, accessingOrganization will be set to null.

The accessingOrganization is reflected in the token table by the introduced column below.
A new column AUTHORIZED_ORGANIZATION is introduced to the IDN_OAUTH2_ACCESS_TOKEN table. That column implies the organization where the access token is bounded for access.

Related Issues.

• [Improvement] Revisit the parameters and behavior of the JWT token issued for a B2B application product-is#16365

Following figure shows how the authenticated user at the framework level propagated to the OAuth layer for persitening and wise versa.
For B2B user logins, the authenticated user is treated as usual federated user. Two new attributes are added called accessingOrganization and userResidentOrganization. Those information are stored in access token, and should be able to build the exact similar authenticated user object from the data stored in the token table.

• The consumer-key of the token table denotes the tenant-id which should represent in authenticed user object.
• The tenant ID of the token table is corresponds to the user's resident organization.

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/6430940618

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/6430940618
Status: cancelled

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/6451823764

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/6451823764
Status: cancelled

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/6453734827

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/6453734827
Status: success

[jenkins-is-staging]

Approving the pull request based on the successful pr build https://github.com/wso2/product-is/actions/runs/6453734827

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/6478030372

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/6478030372
Status: success

[jenkins-is-staging]

Approving the pull request based on the successful pr build https://github.com/wso2/product-is/actions/runs/6478030372