@Override
    public boolean isDelegatedClientAuthorizedFor(final String clientName, final Service service,
                                                  final HttpServletRequest request) throws Throwable {
        val tenantDefinition = tenantExtractor.extract(request);
        return (tenantDefinition.isEmpty() || isDelegatedClientAuthorizedForTenant(clientName, tenantDefinition.get()))
            && handleAuthorizationForService(clientName, service);
    }
This is {@link BaseDelegatedClientIdentityProviderAuthorizer}.

@author Misagh Moayyed
@since 6.6.0
support/cas-server-support-pac4j-core/src/main/java/org/apereo/cas/pac4j/client/authz/BaseDelegatedClientIdentityProviderAuthorizer.java