<@U04UQ68083H> does ory support multi-tenant ident...
# ory-copilot
w
@chilly-king-10285 does ory support multi-tenant identity and user logins
b
A message from kapa.ai
Yes, Ory supports multi-tenant identity and user logins, but this capability is only available through the Ory Network. Self-hosting Ory Kratos does not support multi-tenancy due to limitations in its data model and operational complexity. With Ory Network, you can create isolated tenant projects, each with its own identities, sessions, and configurations, making it suitable for scenarios where you need to manage multiple brands, organizations, or environments within a single platform. This includes support for production, staging, and development environments, as well as customer-facing multi-tenancy and organization management features [Ory Kratos Multitenancy Guide](https://www.ory.sh/docs/kratos/guides/multi-tenancy-multitenant) [Ory Network or self-hosted? Feature differences](https://www.ory.sh/blog/ory-network-or-self-hosting-explained-use-cases).
w
@chilly-king-10285 how can i do multi-tenancy for user logins with ory network
b
A message from kapa.ai
To implement multi-tenancy for user logins with Ory Network, you need to use Ory Network’s built-in multi-tenant capabilities. Each project in Ory Network acts as an isolated tenant, allowing you to manage identities, sessions, and configurations separately for each tenant. Here’s how you can approach multi-tenancy with Ory Network: 1. Create Multiple Projects or Tenants: In Ory Network, you can create multiple projects, each representing a tenant. These projects are fully isolated from each other, ensuring data separation and independent configuration for user logins and identity management [Ory Overview: Components](https://www.ory.sh/docs/intro#components). 2. Multi-Brand and Custom Domains: With the Multibrand feature, you can add multiple custom domains to a single Ory Network project. This allows you to serve different UI views and login experiences for each brand or tenant, while still managing all user accounts centrally. Each domain can have its own custom UI base URL, and users can use the same account across brands, though they will need to authenticate separately on each domain due to browser cookie isolation [Configure Ory to use your UI: Multiple custom domains](https://www.ory.sh/docs/kratos/bring-your-own-ui/configure-ory-to-use-your-ui#multiple-custom-domains). 3. Organization Management: Ory Network supports organization management, allowing you to group users and manage access at the organization level. This is useful for B2B or enterprise scenarios where each tenant is an organization with its own users and login flows [Ory Network or self-hosted? Feature differences](https://www.ory.sh/blog/ory-network-or-self-hosting-explained-use-cases). 4. SCIM Provisioning (Optional): For advanced scenarios, Ory Network supports SCIM (System for Cross-domain Identity Management) at the organization level, enabling automated user provisioning and de-provisioning for each tenant [SCIM documentation](https://www.ory.sh/docs/kratos/manage-identities/scim). Note: Multi-tenancy is only available in Ory Network and not in self-hosted Ory Kratos, as the self-hosted version does not support multi-tenant setups due to data model limitations [Kratos Multitenancy Guide](https://www.ory.sh/docs/kratos/guides/multi-tenancy-multitenant). If you need to enable multi-tenancy, sign up for Ory Network and use its project and organization management features to structure your tenants and user login flows accordingly.