Another question: Assuming I use a tenant per cust...
# ask-a-descoperb
busy-lawyer-62623
05/23/2023, 6:58 PMAnother question: Assuming I use a tenant per customer (let’s call them ACME), I need a unique redirect URL (e.g. https://acme.me.com/login) and a unique domain (e.g. acme.com) per customer and I’d like to reject any other login (e.g. from gmail.com) - is it possible?
g
great-diamond-35515
05/23/2023, 7:05 PMare you using SAML as the authentication method?
anyhow, here some info that may help:
• you can set the tenant domain to map users to tenant (first screenshot)
• you can take SAML configuration according the the tenant domain
Regarding redirection per tenant, do you mean when the flow ends?
FYI I don’t think we support rejecting any other logins, can you elaborate on the issue further? I will communicate it with the product team
great-diamond-35515
05/23/2023, 7:19 PMit worth to mention that you can also block self sign ups as well
b
busy-lawyer-62623
05/23/2023, 8:19 PMLet me try to better explain. Assume I have only 3 customers: acme1, acme2, acme3. They all use google workspace, as I only allow authentication via google workspace. I’d like to reject anyone that is not a customer (e.g. acme4 or gmail). I’d like to have a unique login URL for each customer (e.g. https://acme1.me.com/login)
busy-lawyer-62623
05/23/2023, 10:09 PMA related question would be: IS it better to use projects rather than tenant? Assuming: 1. every customer logs in to their own server, hence why we need a different login URL per customer 2. Every customer uses their own email domain (e.g. user@ACME.com) 3. We need to reject everyone else.
busy-lawyer-62623
05/23/2023, 10:11 PMAnd another related question, assuming the customer wants to manage the users (e.g. see who logged in / freeze uses / delete users etc .. ) how would you recommend providing a dashboard for that? (do we need to build one using your APIs or do you have or plan to have such a feature)
b
breezy-evening-56597
05/23/2023, 11:47 PM
Hi Alon.
1. Multi-tenant is the right approach here in general, but based on your questions, there are some gaps we should discuss and close.
2. We do not offer self-service UI for tenant admins, but you can create it using our management SDK.
3. I asked our PM (@gifted-florist-65280) to review these so we can discuss with you and internally and plan accordingly (these are valid asks)
b
busy-lawyer-62623
05/24/2023, 1:34 AMThanks. as for the UI np. Just wanted to make sure there’s no hidden feature that I’m not aware of.