Hi. We are evaluating Ory Network as a potential Auth0 replacement. I'm curious about how Organizations work in Ory. In Auth0, users can belong to 0 or many orgs. After providing credentials, the user is allowed to select an Organization from a list if they belong to 1 or more. Upon selecting an Org, a specific permission set is applied to their access token and an

org_id

claim is added to their token. Would this same workflow be replicable in Ory? Specifically: 1. is organization membership options? 2. can users belong to multiple organizations? a. if yes, does organization selection occur during the authentication stage? 3. is there a claim added to the access token denoting the user's organization?

We have a so-called organizations feature, but it is not the same as Auth0's: https://www.ory.sh/docs/kratos/organizations/ It basically allows you to force users to use certain SSO providers. Context: if you want to add social sign-in, you probably want the user to be able to select a provider, potentially link multiple, have other credential types like a password, ... In the context of SSO however you want to force certain users to always use the SSO provider. This is what our organizations allow you to do.

Excellent information. Thank you!

In case you need more details and discussion, please book a slot here: https://meetings-eu1.hubspot.com/vincent-kraus