Multi Domain Support not Cross Domain

[masterbater]

Does this support multiple domains that proxy only one instance of ory kratos.
Example
foo.com and bar.com reverse proxy same kratos endpoint

Does the config only supports one domain for redirect? Is it possible for redirect to guess based on the domain it is being accessed? Or the intended behavior is that only the main domain set like foo.com and using bar.com will always redirect to foo.com during browser flows?

[vinckr]

See this document for more info: https://www.ory.sh/docs/kratos/guides/multi-tenancy-multitenant.
You basically host one Ory Kratos instance for each tentant (domain). You can also build a more complex system using OAuth2 flows for federated identities (with Ory Hydra) if you have many tenants (>~1000s)

We also recommend Ory Network to easily manage multiple tenants: https://www.ory.sh/docs/guides/console/create-project

[dm17]

If we're trying to do SSO in order to support multiple domains, then I'm not sure how that is supposed to look. It would be helpful if that multitenant doc were less sparse - including exactly how Ory defines multitenancy in this case. For example, if it is one FQDN per instance of Kratos, then which aspect of Ory is in charge of the SSO between those FQDNs? Will this SSO solution require domain forwarding? I'm not sure where Hydra fits in except for the fact that we need OAuth for one of the domains we need to enable SSO on.

[masterbater]

Thanks I also found a solution to just have one instance of kratos then just use some reverse proxy to be available to multiple domain. Im waiting for adding user attributes so I can add tenantId

…

On Mon, May 9, 2022, 6:48 PM Vincent, ***@***.***> wrote: See this document for more info: https://www.ory.sh/docs/kratos/guides/multi-tenancy-multitenant. You basically host one Ory Kratos instance for each tentant (domain). You can also build a more complex system using OAuth2 flows for federated identities (with Ory Hydra <https://github.com/ory/hydra>) if you have many tenants (>~1000s) We also recommend Ory Cloud to easily manage multiple tenants: https://www.ory.sh/docs/guides/console/create-project — Reply to this email directly, view it on GitHub <#2451 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AGI6VFEDIA3677FSPT7MANTVJDUPBANCNFSM5VILHOSQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[vinckr]

You mean metadata? https://www.ory.sh/docs/kratos/manage-identities/managing-users-identities-metadata

[omeraplak]

Hey @masterbater ,
We are also looking for a similar solution. Could you share some details about the solution you have found?