Support for multitenancy

[harrisonravazzolo]

Gong snippet: TODO

Problem

My organization is looking to use Fleet as part of our SaaS offering, and we anticipate have hundreds of our customers, each which will need their own dedicated tenant, completely isolated from all other deployments.

What have you tried?

I tried to deploy a new tenant and have it as part of my main organization but this isn't possible. Teams functionality of Fleet also is too granular for our use case.

Potential solutions

A centralized portal where my support team can log in through our IdP and access each tenant individually, or as their roles and permissions allow. Our customers would also be able to access their own tenant but not others.

🏰Harry's Cereal Emporium🏰
|__org-cap-n-crunch -prod.crunch.cereal.com
|__org-lucky-charms -prod.charms.cereal.com
|__org-froot-loops -prod.loops.cereal.com

What is the expected workflow as a result of your proposal?

I have my main org, Harry's Cereal Emporium, and I want to bring on another customer. Inside my tenant I can easily add it, creating a completely isolated environment.

[iansltx]

@harrisonravazzolo Seems like this particular take on multitenancy would be more of an IdP thing than something on the infrastructure side? Assuming this prospect would be hosting on-prem and would be comfortable automating infra adds for each additional tenant, as separate infra (e.g. customer-preston), or is there a heavier infra automation ask here?

[harrisonravazzolo]

This is more off a placeholder ticket for now, until I can work with prospect-lucafini to understand the what and the why here.