Tenants
Descope supports a multi-tenancy architecture natively. Each project can have multiple tenants, and the end-users can belong to zero, one, or many tenants.
In a multi-tenancy architecture, a single instance of a software application serves multiple customers, known as tenants. Each tenant is isolated and has its own data, configuration, user management, and functionality. This architecture is particularly beneficial for B2B applications where each customer can have multiple users. In Descope, tenants can be used in any situation in which you may need to group users together.
To learn more about multi-tenancy, check out our Multi-Tenant vs. Single-Tenant blog.
Managing Tenants
Descope admins can create, update, activate, and disable tenants either manually on the Tenants page of the Descope Console, or using the tenant management SDKs and APIs.
Tenant Admins
Users assigned to the Tenant Admin role for a specific tenant have the required permissions to manage SSO and Users for the tenant, and impersonate users associated with the tenant.
Custom Tenant Attributes
Descope allows you to create custom attributes that can store further details about your tenants. You can manage custom attributes from the Custom Attributes tab of the Tenants page of the Descope Console.
Custom attributes can be of type "text", "numeric", "boolean", "single select", "multi select", or "date". You can utilize the "multi select" type as an array.
Custom attributes can be used to store any data you want for the tenant. For example, this data could be a tenant's paid tier, geographical location, etc. You can later utilize these attributes within custom claims or load them for a tenant and display them within your application.
SSO Settings
Any Project-Level SSO Settings (like redirect URLs, mandatory user attributes, SSO Setup Suite configurations, etc) will apply to all tenants in your project. For SSO configuration with the tenant's external IdP, refer to our Tenant SSO doc.
Widgets
You can use Widgets to delegate tenant management actions to your Tenant Admins. Widgets are client-side components that you can embed in your website using our SDKs. To learn more about delegating management using Widgets, refer to our Admin Widgets doc.