https://www.ory.sh/ logo
#general
Title
# general
l

loud-grass-72494

10/05/2021, 1:48 PM
Hi, I receive a question from my peers review of Ory and can someone please help? The question is about does Ory has the concept of Realm of Keycloak? Let's say I want to use Ory Hydra to provide different public/private keys for different groups of users, and also configure different groups of users in Ory Kratos.
h

high-optician-2097

10/05/2021, 1:49 PM
No, multi-tenancy is not supported in ory products. The fastest way to get multiple tenants working is probably through ory cloud. Alternatively you can deploy kratos and hydra multiple times to get isolated environments
l

loud-grass-72494

10/05/2021, 1:50 PM
thx for quick confirmation. so I can refer to the doc https://www.ory.sh/kratos/docs/guides/multi-tenancy-multitenant/
h

high-optician-2097

10/05/2021, 1:55 PM
Yeah - keep in mind that multi tenancy means like completely isolated environments so you can have e.g. primary keys which are clashing etc
If you just want to have different groups you don’t need multi tenancy
l

loud-grass-72494

10/05/2021, 1:57 PM
thx for reminding. so if I want to have different groups, what would be recommended without using multi tenancy?
h

high-optician-2097

10/05/2021, 2:34 PM
hard to say, as you see from the multi-tenancy / realm / group discussion already it highly depends on your model. I would suggest to just play around, see whjat’s possible, and learn if it fits your needs. In the end noone can make that decision for you and you will probably even learn a few new things 🙂
👍 1
m

microscopic-forest-58980

10/05/2021, 6:37 PM
@loud-grass-72494 this might be helpful also if you need some roles that are cross-tenant (e.g. an admin from your company who can log into multiple tenants' systems for diagnostics/support purposes) and then you have a claim in the tenants' employees' JWTs that only allows them access to the data for their tenant
Built in stuff like realms can also be overly restrictive when you need to go cross-realm
b

bitter-coat-49094

10/06/2021, 6:42 PM
I think you can get around most tenancy issues by just handling more hydra/kratos/login node microservices. Our biggest issue with prod right now is i18n (internationalization, we support at least 4 languages) on Kratos emails and Kratos messages have no simple way to customize it for now.
4 Views