Feature: Inverted multi-tenancy about fusionauth-issues HOT 2 CLOSED

Hi @dseller , thanks for the request.

What you're describing is how we think about Applications in FusionAuth. In FusionAuth you can have one-to-many Applications, each application represents an authenticated resource.

When a JWT is issued by FusionAuth, the applicationId will be provided in the JWT payload.
https://fusionauth.io/docs/v1/tech/tutorials/json-web-tokens#jwt-payload

The Getting Started page has an overview of the User and Applications concepts in FusionAuth.
https://fusionauth.io/docs/v1/tech/getting-started/
https://fusionauth.io/docs/v1/tech/tutorials/create-an-application

Similar to how you describe the JWT and switching to a new "tenant" and receiving a new JWT, this also fits into how we see Applications. A JWT is issued to a user per application, once you have a valid JWT you can either use our OAuth login to receive a new JWT for another Application, or use our JWT APIs to issue yourself a new JWT for another Application from a valid JWT.

https://fusionauth.io/docs/v1/tech/apis/jwt#issue-a-jwt

Regarding to query by tenant, the User Search API allows you to use criteria such as Application Id, Tenant Id, Group Id and others to allow you to narrow your result set.

https://fusionauth.io/docs/v1/tech/apis/users#search-for-users

Let me know if you'd like a hand with any of these APIs, or if I can provide you additional information.

from fusionauth-issues.

Thanks for your elaborate response. I have implemented the solution using Applications as "tenants". In order to present the user with a list of available applications, I simply use the registrations array on the User object. Perfect!

from fusionauth-issues.