Everything is scoped to your one organization

Every application is approved against exactly one Florisage organization — never "all of Florisage's clients." There's no endpoint that lists or looks up organizations at all: your credentials already identify which one you are, so every resource below (users, enrolments, certificates, seats) is scoped to it automatically. A user/enrolment/certificate id that belongs to a different organization returns a plain 404, the same response you'd get if it didn't exist, so there's no way to even confirm another Florisage client exists.