Hi, we’re evaluating Ory cloud as our SSO provider. We are building eCommerce multi tenant application. Each customer (and each of their employees) will have their own account. Our goal is to have a single “mothership app” at cosmos.swiftyspace.com that will manage access to different eCommerce apps. Each user can have one or many eCommerce apps assigned to them. Those apps will be on separate subdomains (e.g. shop1.cosmos.swiftyspace.com, shop2.cosmos.swiftyspace.com) Only users assigned to those apps should have access to them. We want to have a seamless transition between individal apps without the need to sign in each of them individually. Is this something we are aple to do with Ory? If so, are there any rate limits on the ammount of separate apps?

Hello. You can create an Ory Cloud project that handles login/registration/recovery flows for you and run it on auth.cosmos.swiftyspace.com domain. You can use Ory Keto to handle permissions and access control. Keto is coming soon to Ory cloud, and it’s a matter of days now.

Lets say I have app1, app2, app3 and root app. Then I have user 1, user 2 and user 3. User 1 can access only app1. He is the one that created it and is the one managing it. Then I have user 2. He is a business man and we are running 2 eshops for him (app2 and app3). He can access both of them. The app3 is bigger a shop and he has an employee for that one (user 3) user3 can access only app3 whereas user2 can access both app2 and app3

Okay. I got it. Thanks for the explanation. Yes. You can achieve it using Ory Cloud. As a workaround, you can use the open-source version of Ory Keto until it is available in the Cloud. 1. Keto installation 2. Check whether a User has Access to Something

Thank you very much! I’ll give it a go