Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

I need to set up a multi-tenant platform using Oathkeeper and Kratos. I understand what the multi-tenancy article is talking about, but it’s very light on details, so I’m making assumptions about how to route Oathkeeper to the right Kratos instance based on the subdomain being accessed, using rules added per tenant. That’s all good, but the issue I have that I would like to discuss is “how would you be able to provide the same user accounts to multiple tenants?” We have a support team who will need to be able to access every tenant. In solutions like FusionAuth, we can send auth requests to different identity providers based on email domain for example. How would one do that with Ory services?

It would be nice to be able to add multiple authenticators of the same type in, so have two cookie_session handlers that could be checked. That would make my problem go away.

I think the easiest way is to just deploy 2 oathkeepers