Is there a way to make the kratos / oathkeeper to ...
# talk-kratos
r
Is there a way to make the kratos / oathkeeper to discover the tenant and Authenticate?
e
Hi Vimalraj, I just starting playing around with Kratos, not a maintener or something. I don't know if it will help, but I saw this on the documentations: https://www.ory.sh/kratos/docs/guides/multi-tenancy-multitenant/
m
We built Ory Cloud for multitenancy out of the box, If you want to self-host Tom already posted a good solution: Spin up a Ory Kratos instance per tenant. Also check out this tip.
r
I'll definitely give Ory cloud a try. Spinning up separate instances for each tenant is still ok, but dynamic provisioning and oidc configuration still a grey are to me. Is there any way to provide dynamic oidc setup? I'm still very new to ory
m
Hey Vimalraj, sure! RFC 7591 Dynamic Client Registration is implemented in Ory Hydra, so it should be possible 🙂 . Ory Hydra is not yet part of Ory Cloud yet, it is one or two months out.
r
Awesome! Is it possible to add custom social login dynamically in Ory Kratos ?
m
If you combine it with Ory Hydra, should be no problem. Just out of interest, what is your use case for the RFC 7591?
r
Multi tenant authentication We have different native applications running in subdomain, and we want multi tenancy as well. As per this link (https://www.ory.sh/kratos/docs/guides/multi-tenancy-multitenant/) If we go ahead and create new instance of ORY Kratos for every tenant we can authenticate with tenants only if we know the tenant id (Tenant discovery is a problem). So, having dedicated instance of Kratos won’t work without solving tenant discovery. If we keep single Kratos for all customers and keep the tenant information outside authentication, Post login we can authorise the user to particular tenant with custom logic. But, When customer ask for integration with their private identity provider, We may do with custom OIDC provider(Kratos Social provider) If that configuration become dynamic.
I still need to figure out tenant discovery with Kratos
m
I see, thanks! very interesting, but not very easy to set up. Let me know how it goes, I will see to ping you if I find anything related.
👍 1