template: Tenancy

[ascott18]

Tasks

Preview Give feedback

1. Switching: Choose tenant screen
2. Invitations: Generate link
3. Invitations: landing page for invitation link. Use existing account (MVP), or sign in with external (MVP), or create local account (future)
4. Self-service: tenant creation
5. Switching: link to switching page from top-right menu
6. Hostname: middleware to set tenantID from host name
7. Hostname: tables for hostnames
8. Hostname: send correct hostname in invitation links
9. Global Admin: All-tenant admin area
10. Global admin: Create tenants
11. Global admin: Add users to tenants
12. Handle audit logs

[ascott18]

Use Cases

• Tenant decided per domain. No tenant switching, no determination based on user source (AAD/Google). Used for sites that have a public, unauthenticated aspect to them so that public users can be routed to a specific tenant.
  • ❤Users are explicitly invited to tenant (Goat)
  • 💜OR users are permitted to freely sign up to that tenant, or link their existing account to that count
• Single domain. Can switch between tenants with a dropdown, maybe prompted on sign-in. Options:
  • 💙Tenant strictly tied to external sign in, tenants either created automatically based on external provider or explicitly created by "super admin" or a sign-up form. (Myriad, Wiki, STC)
  • 💛Tenant membership granted by being invited by an existing admin within that tenant, or by the "super admin" (AIS, CWA)
  • 💚Hybrid: 💛 + Automatic membership to home tenant. (Myriad desired)

Options (each actual template flag marked with ⭐, not all combinations are valid)

• ⭐Base
  • Tenant table
  • TenantMembership table (User-Tenant many-to-many)
  • AppUser { bool IsGlobalAdmin }
  • Global query filter & save interceptor
  • TenantBase class
• Membership:
  • ⭐Invitations from admins within the tenant
  • ⭐Invitations from Global Admin
  • ⭐Self-service sign-up or link existing account
  • ⭐Implicit from AAD/GSuite
• ⭐Tenant decided by:
  • hostname
  • switching/prompt
  • future: path segment
• Tenant creation:
  • ⭐Self-service sign-up form
  • ⭐Automatic from AAD/GSuite
  • ⭐super admin