Docs

Multiple Tenants

You can configure multiple tenants in Auth0 to allow for more complex configurations.

For instance, if you have two separate domains (for example, one internal and one public-facing) or would like to allow users to log in differently for different applications, the best solution is to create more than one Auth0 tenant. This will allow you to have separate sets of applications, connections, and users for the applications and groups of users you need to support.

Example: Internal Application + Public-Facing Application

Let's suppose that your company, Fabrikam, has two applications: an internal timesheets application (Fabrikam Employee Timesheets) and a customer portal (Fabrikam Customer Portal). You want users to be able to log in to the timesheets application using either their Active Directory credentials or G Suite. On the other hand, you want users to be able to log in to the customer portal via G Suite, Facebook, or LinkedIn.

For the internal timesheets application, you would configure the following in Auth0:

  1. Create a tenant (Fabrikam-Internal) for your internal domain via the Settings menu in the top right on the Dashboard.
  2. Register an application within this tenant for your timesheet application (Fabrikam Employee Timesheets).
  3. Configure the following Enterprise connections for this tenant: Active Directory/LDAP and G Suite.
  4. Once all connections are configured, navigate to the Connections tab in the timesheet application's application settings and enable the connections for the application.

For the customer portal, you would configure the following in Auth0:

  1. Create a second tenant (Fabrikam-Public) for your public-facing domain.
  2. Register an application within this tenant for your customer portal (Fabrikam Customer Portal).
  3. Configure the following Enterprise connection for this tenant: G Suite.
  4. Configure the following Social connections for this tenant: Facebook and LinkedIn.
  5. Once all connections are configured, navigate to the Connections tab in the customer portal's application settings and enable the connections for the application.