[prev in list] [next in list] [prev in thread] [next in thread] 

List:       keycloak-user
Subject:    [keycloak-user] Multi-tenancy with groups
From:       dean.wyns () aptus ! be (Wyns Dean)
Date:       2018-09-27 12:45:57
Message-ID: CC7F9E69ED13DD478810F42866C6FAA1B7FAAEAA () CBW-MHEXCH-C ! iconos ! be
[Download RAW message or body]

Hi there

A client of ours requires multi-tenancy (multiple customers) but without isolation of \
users. In others words, one user can be linked to multiple customers. A user with the \
permission to do so, should be able to manage their customer's users.

For this client we created a realm to completely isolate it. So we would use groups \
to implement the customers below our client. Is creating a group per customer the \
best way to implement this? And then restrict the user management by using the \
fine-grained permissions built into the Keycloak admin console?

Or is there another better way?

Thanks
Dean


[prev in list] [next in list] [prev in thread] [next in thread]