Multi_Tenant Login Question

Markfre1

I creating a multi-tenant app in AIM and have questions regarding the login.

In my other C/S tool we have a Tenant Login first, and then there is a User Login.

I know some of you have created multi-tenant apps and I am not sure how to handle it in AIM. One note: The data will be segregated with a tenant id.

I don't think I can just go to the AIM login screen as a user. Because there can be many 'Marks' in different tenants. I could use an email as a unique identifier but I don't think this is the best approach.

I can't go in a a guest, ask the company login, and then do a user log in because I think session information is reset.

Maybe I need an HTML page up front independent of AIM which ask for the company, even the user name, and pass that into AIM. May need AIM to assist.

I'm fishing so since some of you have done this, I would like to hear how you approached it.

Assume I could have 1000 or more tenants, with each having users.

Thanks in advance. Mark

kklosson

I don't see where you have to do anything special other than setting all queries to filter for loggedin user.

...Where Account.ID=LoggedInRegularUser.Account.ID

Markfre1

I think I need to know the tenant first.

So if someone comes to a web page, and wants to sign up, I need their company info, and assign a tenant id. Then all the users created are under that tenant.

So to start there is no user or tenant yet for a query.

It like I need the tenant first, and then log in.

How are you indicating the tenant would be created, or the user signing up is under a tenant?

Once a user is assigned a tenant, then the expression below works? Am I looking at this wrong? Thanks.

Mark

customaware

I am in the process setting a multi tenancy system up Mark and have chosen the alternative route of having a separate BS for each tenant. This actually addresses you concern as you can either have the domain (BS), Login Name and password on the same page, or, a separate login page with the domain (BS) already embedded. I intend to use the second option with subdomains

So, image two companies called, for example, ACME Clothing and MACE Motors.

ACME employees will login with

acme.myserver.com and their login will only ask for a username and password. The domain acme will be embedded in the login page.

MACE employees will login with

mace.myserver.com and their login will only ask for a username and password. The domain acme will be embedded in the login page.

That all being said.... I haven't actually done it yet but that is the plan.

In addition to that, each company will have a login to their registration app which will contain registrations of all companies and will maintain their domain (BS) company name details, billing and system config stuff.

I am let to believe, again haven't seen yet, that it is possible to get an add-on to automatically create a new BS of the name you want. Hence, when someone registers, that will fire up and create the new space, subdomain and login page and they are ready to go.

All sounds wonderful and now just have to make it happen. Conceptually it is doable.

In fact if anyone has ACTUALLY done this then you should consider offering it as a service to others (for a fee of course) as, like me, I am sure others would be happy to pay to have the tedium of working it all out (as trivial as it might be). I might even offer as a service myself in nobody else does once I am done. 😉

hpl123

eagles9999 wrote
I am in the process setting a multi tenancy system up Mark and have chosen the alternative route of having a separate BS for each tenant. This actually addresses you concern as you can either have the domain (BS), Login Name and password on the same page, or, a separate login page with the domain (BS) already embedded. I intend to use the second option with subdomains

So, image two companies called, for example, ACME Clothing and MACE Motors.

ACME employees will login with

acme.myserver.com and their login will only ask for a username and password. The domain acme will be embedded in the login page.

MACE employees will login with

mace.myserver.com and their login will only ask for a username and password. The domain acme will be embedded in the login page.

That all being said.... I haven't actually done it yet but that is the plan.

In addition to that, each company will have a login to their registration app which will contain registrations of all companies and will maintain their domain (BS) company name details, billing and system config stuff.

I am let to believe, again haven't seen yet, that it is possible to get an add-on to automatically create a new BS of the name you want. Hence, when someone registers, that will fire up and create the new space, subdomain and login page and they are ready to go.

All sounds wonderful and now just have to make it happen. Conceptually it is doable.

In fact if anyone has ACTUALLY done this then you should consider offering it as a service to others (for a fee of course) as, like me, I am sure others would be happy to pay to have the tedium of working it all out (as trivial as it might be). I might even offer as a service myself in nobody else does once I am done. 😉

The creation of BS´s via rules etc. would be a great option. Is it possible to do this today via UDP? (User Defined Processes). If so, having a subscribe form that sends an e-mail to the application which then activates a process to create the BS could possible be enough as a first solution (more advanced/better integration would of course be ideal since emails can be lost, not work etc..).

Mark, please keep us informed if you hear more about actually realizing a solution for this. Thanks

Markfre1

I have gone through the concept of multiple BSV's versus using one set of data using a Tenant_ID filter. As much as I like keeping the data independent with seperate BSV's, easier backups, one crash not affecting others, etc., I am opting for segregating via Tenant ID.

If you are working with a few companies, mutiple bsv's will work. But in my case, I hope to have 1000 or more small companies signing up on the fly. My competitor has 180,000 companies. So a user needs to go in, sign up and be running without any intervention. Also, maintaining a large # of BSV's is difficult.

I intend to have multiple BSV's when I hit a certain # of users. Maybe per 100 or per 1000, with multiple servers, databases, etc. I intend to spin these up on AWS (anyone with feedback experience with AWS and AIM is appreciated).

The concept mentioned with ACME and MACE below seems to be used by another competitor of mine (5 million users).

I was thinking along that line, but instead of going to a seperate BSV, pass this information as the TENANT into AIM, or Pass in the TENANT ID, USER NAME and PASSWORD. This might take a plug in from AIM. A couple of years ago, AIM did a plugin for us to accept through the URL, the Facebook user name and password and log us in. (Later they added as part of AIM)

Anyway, I am trying to figure out the best way to have the Tenant ID either before or during the login process. More feedback appreciated.

Thanks, Mark

Markfre1

I've been out of AIM for about a year so had to familiarize myself again.

I think I came up with an on the fly, multi-tenant registration and login solution. Very simple.

Basically an AIM screen comes up with 2 options in guest mode. Register or Login.

If the user clicks login, I display a form which asks for their company name and email. This is not the AIM registration option. I create a Tenant record with an automatic tenantid increment, email, and company name.

Upon creating the tenant record, I then create a tenant_user, use the tenantid created, email, company name, accesslevel, and other basic info.

So basically new customers can come in, create their company, the first user is created, and they start processing. Simple.

I forgot how to create the tenant record automatically. Forgot if its a create, insert, need to read the docs tommorrow. Maybe someone can point it out to lessen my reading.

This is the foundation for creating companies/security so if anyone sees any flaws is this logic, please let me know.

Mark