JWT based routing

Hi together,

I’m using kong to create a multi tenant architecture. The whole authentication is running against one single Active directory. So all the different customers are in the same AD. To route the customer to its own API I want to take a look into the information inside of a jwt token that kong gets from a frontend. Based on the enriched information from this token kong should reject requests against an API of the other customer. Is there anything in kong that can handle that scenario?