Hi team, is there a roadmap or a standard approach for working with the API regarding tenant activation? Or are we expected to handle the logic for processing requests associated with a specific tenant on our own?
Regards,
Nelson F.
Hi Nelson,
Currently, the generic REST API doesn’t offer any special handling of multitenancy.
Can you describe your use case in more detail?
Regards,
Konstantin
An API is available in a SaaS environment that allows users to process customer orders from a mobile app. Since there are multiple tenants, the data must be filtered and restricted to the appropriate tenant.
If your API clients authenticate using Authorization Code or Password grant (providing tenantId|username as the user name), the REST API gets TenantId from the User entity the same way as when working through UI, and data is filtered according to the tenant.
When authenticating using the Client Credentials grant, the client sees data of all tenants.