Hi Scott,
Thanks for your help!
If you don't mind, I'll try to explain the customer's use case so you can assess whether it's feasible to support it with Verify SaaS:
The customer is a large financial market company called XYZ, which provides applications that grant access to the Brazilian Stock Exchange. They sell this service to small investment brokerage firms, which in turn have their own B2C clients. XYZ would have full control of the Verify SaaS web console but would delegate all end-user administration to the brokerage firms, each one managing their own users separately and independently from the others.
Regards,
Rodrigo
| | Rodrigo Xavier
Coordenador de Consultoria
Segurança da Informação e Privacidade
Rio de Janeiro (21) 2507-2010
São Paulo (11) 3167-0526
www.triscal.com.br |
Original Message:
Sent: 5/1/2025 2:12:00 AM
From: Scott Andrews
Subject: RE: Verify SaaS Multi Tenancy Support
> The customer wants only one root tenant and the possibility to add child tenant under root tenant administration.
That requirement perhaps needs to be elaborated and understood.
There are implications beyond user/groups; there's Applications (SSO Apps), Access Policies, Password Policies, MDM Providers and so on that aren't conducive to the ask.
> Is that possible to config in Verify SaaS with vanity hosts?
Not that I'm aware.
Whilst there is comprehensive support for delegated administration roles, Social login providers, multiple identity sources, custom policies, provisioning, workflow, etc. a Vanity Host and Theme would only control the branding or end user experience as to what they see in their browser.
The question at hand seems more aligned to management, not UX.
> If no, how can i help this customer?
I think a reassessment of their requirement and why they think they need it that way is the best way forward and also to reach out to your local IBM Account team for options and alternatives.
------------------------------
Scott Andrews
------------------------------
Original Message:
Sent: Wed April 30, 2025 08:44 AM
From: Rodrigo Xavier
Subject: Verify SaaS Multi Tenancy Support
Hi Scott.
The customer wants only one root tenant and the possibility to add child tenant under root tenant administration. In this use case, the users administration of child tenant must be delegated to the one or many admin users of the child tenant segregated of the others child tenants. Is that possible to config in Verify SaaS with vanity hosts? If no, how can i help this customer?
Regards,
Rodrigo
| | Rodrigo Xavier
Coordenador de Consultoria
Segurança da Informação e Privacidade
Rio de Janeiro (21) 2507-2010
São Paulo (11) 3167-0526
www.triscal.com.br |
Original Message:
Sent: 4/29/2025 11:28:00 PM
From: Scott Andrews
Subject: RE: Verify SaaS Multi Tenancy Support
Maybe with Vanity Hosts - so you have a different host/domain name to access the <host>.verify.ibm.com tenant and use themes to change the appearance depending on the Vanity Host?
Not quite certain of the ask to "simulate" multi-tenant though, and the context on how/why it would be needed given it's SaaS?
Vanity Hosts (custom domain names) https://www.ibm.com/docs/en/security-verify?topic=verify-obtaining-vanity-hostname
Themes (Branding) https://www.ibm.com/docs/en/security-verify?topic=experience-managing-branding
These features can be used independently of each other, so Themes may be sufficient depending on your needs.
You can also then use groups or roles to determine which applications users will see on their User Home Page.
------------------------------
Scott Andrews
Original Message:
Sent: Mon April 28, 2025 10:30 AM
From: Rodrigo Xavier
Subject: Verify SaaS Multi Tenancy Support
Hi all,
I´d like to know if it possible to simulate a multi tenant in Verify SaaS.
If yes, could anyone share how to do it?
Thanks,
Rodrigo
------------------------------
Rodrigo Xavier
------------------------------