Is someone able to link me to what `B2B Multi-Tena...
# ory-network
t
Is someone able to link me to what
B2B Multi-Tenancy
means within Ory Network? Am I correct in staying that if you have a B2B product, and each business who uses our product and sets up their SSO to auth with us, would count as 1 tenant?
m
B2B Multi-Tenancy essentially means that you can easily buy Ory Network projects in bulk for discount prices. So if you need hundreds this is a bit cumbersome to buy that many through normal checkout. 5 projects are included in the base “Scale” plan and more are possible.
if you have a B2B product, and each business who uses our product and sets up their SSO to auth with us, would count as 1 tenant?
No, only if you create a separate Ory Network project for each of those businesses. If you manage them all in Ory Network project you only need one. If you do need different configuration for each of your tenants -> B2B Multi-Tenancy The same way it works for domains. So you can also add multiple domains to one Ory Network project, if you want for example login.acme.com and auth.example.net on the same Ory Network project. @fast-lunch-54279 please check if this is correct, since this is a pretty new feature
f
yes, that's correct. With B2B multi-tenancy, we refer to multiple projects to isolate identity pools and configuration; we also have exciting updates in the pipeline to make B2B tenant management simpler! Multi-Site/Domain refers to a single project, a single set of identities, but SSO across multiple web properties/sites on different domains - so Ory can be configured with multiple CNAMES to issue cookies for different domains, and you can configure redirect URLs etc. accordingly.
t
Ok, thanks - that makes sense! In that case, do you have the concept of Organisations within Ory Network? Say we have a SaaS Product, Customer A signs up, and what's to use their Google Workspace for their employees to login, and then Customer B wants to use say Okta. Can this be handled within one Ory Network project, but have clear seperation of organisations for their SSO needs, or would that come under the B2B Multi-Tenancy?
m
I think you can handle this within one Ory Network project, but then you need a custom UI for each customer ( to only show the SSO they want / hide the other options). But it is much easier to manage using multiple projects, since you can just the UI as is, no config needed to differentiate the different tenants. Is the main difference for your tenants OIDC config or are there other things to consider as well?
t
Yeah, pretty much just different OIDC config between them