Example of a SaaS application architecture

Consider an example of a SaaS solution deployed as a transactable offer through the Azure Marketplace. In this case, the control and processing are deployed in the publisher subscription.

Diagram showing the example of a SaaS application architecture

The following steps explain the interactions between the various components in the Saas application architecture:

  • The customer purchases the solution through the Azure Marketplace.

  • The SaaS solution uses the fulfillment API to register the new customer.

  • The SaaS solution uses Entra to authenticate the users. The process requires a configuration that allows cross-tenant authentication.

  • The orchestration layer creates separate deployments of the processing logic per customer. Creating separate deployments simplifies assigning permissions to read and write customer resources and allows deployment in the right region to reduce networking costs.

  • The processing logic accesses the customer data, performs the relevant transformations, and writes the results back to the customer tenant.

To isolate data from one customer to another, you can use managed applications that are internally deployed. For example, a dedicated deployment of the application runs for every customer in the publisher tenant in a separate resource group that represents the processing stamp, as shown in the architecture diagram.

Next steps

Get started with the following article:

You can then refer to the following article: