diff --git a/app/services/auth_service.py b/app/services/auth_service.py
index 53257b2..07a4817 100644
--- a/app/services/auth_service.py
+++ b/app/services/auth_service.py
@@ -240,6 +240,10 @@ class AuthService:
         for prev_token in prev_result.scalars().all():
             prev_token.used_at = datetime.now(UTC)
 
+        # Set tenant context for RLS (auth session uses crm_auth role)
+        from app.core.db import set_tenant_context
+        await set_tenant_context(db, user_tenant.tenant_id)
+
         # Create new token
         import secrets