If you are writing applications that will live in or consume the Microsoft Cloud, you must understand this guidance!
Blog post: https://azure.microsoft.com/en-us/blog/guidance-for-identity-management-in-multitenant-applications/
Guidance: https://azure.microsoft.com/en-us/documentation/articles/guidance-multitenant-identity/