Abstract: A system includes a communications interface communicably coupled to a computing environment and a client device corresponding to a first tenant of a plurality of tenants of the computing environment. The computing environment includes a plurality of resources, at least one resource being accessible by the client device, and a processing circuit including a processor and memory, the memory storing instructions that, when executed by the processor, cause the processor to perform operations including generating a multi-organization token for the at least one resource based on credentials corresponding to the first tenant, receiving a request to access the at least one resource in the computing environment, the request including the first tenant-specific token, determining whether the first tenant-specific token is valid, and providing access to the at least one resource in the computing environment responsive to a determination that the first tenant-specific token is valid.