We're looking at ory network as our solution. We have some high priority use cases. In particular, we need to support the ability to have users of a managing organization be easily onboarded to customer organizations to do initial setup and support. We also need to support having partners and customers bring their own IDP. In addition we need to be able to authenticate machines using PKI.

Hi Stacy, thanks for sharing! I'll be in touch via dm

FYI, we had a call with Vincent. Seems like the ability to invite a user to another org using the same identity as they have in other orgs (projects) is something that cannot be done "out of the box". He is looking into how that may have been solved for other customers

this is an interesting scenario. in your target picture, the identity is really the same, and stays the same, so that a password change in one org would change the pw everywhere, right?

That is what we are hoping for, yes

do you also have the scenario where someone needs to have two accounts (for different Orgs) with the same email/idp connection?

We'd want them to have the same identity on both orgs, so 1 account to relationships