Hire the workshop.
Enterprise identity and architecture for B2B SaaS, designed and built by Andrew Baugh.
Numyl is a small software workshop in Utah. Alongside the products on the bench, I take on a few consulting engagements at a time, in one specialty: the identity layer a B2B SaaS product needs before enterprise buyers will sign — single sign-on, tenant isolation, and automated provisioning.
Single sign-on (SSO/OIDC).
Standards-based sign-on against your customers' identity providers — Entra ID, Okta, Auth0, Keycloak, Zitadel.
Multi-tenant isolation.
Per-organization separation of users, roles, and data, built from the data layer up.
Just-in-time provisioning.
A new user's account and role are created correctly on first SSO login. No manual admin work.
Auth & Architecture Diagnostic.
A review of your current auth, tenancy model, and data isolation; a written gap report covering what an enterprise security review will flag; and a costed migration plan your team (or I) can execute.
Enterprise-Ready Identity Build.
The diagnostic's plan, executed: OIDC sign-on, tenant isolation, and provisioning, shipped as well-tested .NET services with CI-driven deployments, alongside your existing system so current customers see no disruption.
Rebuilding the identity layer of a multi-tenant .NET SaaS.
A B2B SaaS product had grown on a homegrown cookie/token auth system. It worked, but it could not offer what larger buyers were starting to require: single sign-on with their own identity provider, clean separation between customer organizations, and automatic account provisioning. I designed and shipped the rebuild — OIDC in place of custom auth, per-tenant isolation, JIT provisioning — migrated alongside the existing system so current customers saw no disruption. The product can now check the boxes that come up in every enterprise security review.
Client and product names withheld under confidentiality; I'm happy to walk through the architecture on a call.
This site runs on the same approach: one multi-tenant, subscription-aware platform underneath every Numyl app. You're reading the portfolio.
.NET / C#, ASP.NET Core, EF Core, PostgreSQL, Docker, GitLab CI, OIDC / SAML.
Rules of engagement, posted at the bench.
Fixed scope, fixed fee.
Agreed before work starts.
Cash engagements.
No equity-in-lieu arrangements.
Written updates every week; no surprises.
Write to hello@numyl.org to start a conversation.