Different SSO per team/tenant of my application
-
Hi!
I'm would like to build an application that uses fusionauth for user management and tenant management. I'm not sure if this is possible or how it should be configured
User Flow:
- After you signed up with your E-Mail, a team/tenant is created in my app and granted rights to manage users, setup SSO and create API token for my SaaS API.
- The admin user sets up SSO (openid/saml/ldap) in fusion auth
- If another user tries to login, fusionauth should check the email domain and find the user via the configured SSO
- The admin user can configure groups and roles to these users
Is this possible? If so, how would I configure this? Are there any examples?
Best,
Steven -
Hiya Steven,
Thanks for the details. I'm not aware of any example applications that have this workflow.
You could definitely do most of thisthis, but you'd be writing a lot of API glue code. You'd be creating identity providers and configuring managed domains to accomplish step 3.
The one thing that I know can't be done right now is creating an API key via the API. See https://github.com/FusionAuth/fusionauth-issues/issues/887 for more details about that.
