Maybe with Vanity Hosts - so you have a different host/domain name to access the <host>.verify.ibm.com tenant and use themes to change the appearance depending on the Vanity Host?

Not quite certain of the ask to "simulate" multi-tenant though, and the context on how/why it would be needed given it's SaaS?

Vanity Hosts (custom domain names) https://www.ibm.com/docs/en/security-verify?topic=verify-obtaining-vanity-hostname

Themes (Branding) https://www.ibm.com/docs/en/security-verify?topic=experience-managing-branding

These features can be used independently of each other, so Themes may be sufficient depending on your needs.

You can also then use groups or roles to determine which applications users will see on their User Home Page.

------------------------------
Scott Andrews
------------------------------

Hi Scott.

The customer wants only one root tenant and the possibility to add child tenant under root tenant administration.  In this use case, the users administration of child tenant must be delegated to the one or many admin users of the child tenant segregated of the others child tenants.    Is that possible to config in Verify SaaS with vanity hosts?  If no, how can i help this customer?

Regards,

Rodrigo

Rodrigo Xavier Coordenador de Consultoria Segurança da Informação e Privacidade Rio de Janeiro (21) 2507-2010 São Paulo (11) 3167-0526 www.triscal.com.br

Maybe with Vanity Hosts - so you have a different host/domain name to access the <host>.verify.ibm.com tenant and use themes to change the appearance depending on the Vanity Host?

Not quite certain of the ask to "simulate" multi-tenant though, and the context on how/why it would be needed given it's SaaS?

Vanity Hosts (custom domain names) https://www.ibm.com/docs/en/security-verify?topic=verify-obtaining-vanity-hostname

Themes (Branding) https://www.ibm.com/docs/en/security-verify?topic=experience-managing-branding

These features can be used independently of each other, so Themes may be sufficient depending on your needs.

You can also then use groups or roles to determine which applications users will see on their User Home Page.

------------------------------
Scott Andrews
------------------------------

> The customer wants only one root tenant and the possibility to add child tenant under root tenant administration.

That requirement perhaps needs to be elaborated and understood. 

There are implications beyond user/groups; there's Applications (SSO Apps), Access Policies, Password Policies, MDM Providers and so on that aren't conducive to the ask. 

> Is that possible to config in Verify SaaS with vanity hosts? 

Not that I'm aware.  

Whilst there is comprehensive support for delegated administration roles, Social login providers, multiple identity sources, custom policies, provisioning, workflow, etc. a Vanity Host and Theme would only control the branding or end user experience as to what they see in their browser.

The question at hand seems more aligned to management, not UX.

> If no, how can i help this customer?

I think a reassessment of their requirement and why they think they need it that way is the best way forward and also to reach out to your local IBM Account team for options and alternatives. 

Hi Scott.

The customer wants only one root tenant and the possibility to add child tenant under root tenant administration.  In this use case, the users administration of child tenant must be delegated to the one or many admin users of the child tenant segregated of the others child tenants.    Is that possible to config in Verify SaaS with vanity hosts?  If no, how can i help this customer?

Regards,

Rodrigo

Rodrigo Xavier Coordenador de Consultoria Segurança da Informação e Privacidade Rio de Janeiro (21) 2507-2010 São Paulo (11) 3167-0526 www.triscal.com.br