> Business authorization models work exactly the same way
Except you got people from the parent company wanting access to certain stuff, and then there's the third-party auditor that needs access and so on.
So no, B2B isn't exactly the same necessarily.
From the authentication systems perspective, what exactly is the difference between an employee and 3rd party auditor?
From the authorization system, why would it care who they work for, as opposed to the permissions assigned to them?