Multi-Tenant Extension for Keycloak

Q: How do applications use the tenant context?

The active tenant is included as a claim in the token – including tenant ID and optional attributes. Your applications read this data and use it to control pricing, terms or content. No separate tenant management in the application is required.

Q: Can a user work in multiple tenants?

Yes. A user can be assigned to multiple tenants and have different roles in each.

Q: Can tenant admins manage their users themselves?

Yes, in combination with the User Portal. Tenant admins can then create, invite and manage users within their tenant – isolated from other tenants.

Q: Does the extension work with existing Keycloak installations?

Yes. The extension extends Keycloak without modifying the core. Existing users and configurations remain intact. Migration can be done step by step.

Q: What is the difference compared to separate Keycloak realms?

With separate realms, users, clients and configurations must be maintained per realm. With the Multi-Tenant Extension, you manage all tenants in one realm – with central configuration and the option to assign users to multiple tenants.

Multiple Tenants in One Realm – for SaaS, B2B and Enterprise Structures

Assign users to a tenant – a customer company, partner or team. Applications receive this context in the token and can adjust content, pricing or permissions accordingly. What you gain:

Tenant context in the token: applications know who belongs to whom
B2B scenarios: users see their company’s prices and terms
With User Portal: tenant admins manage their users themselves

Keycloak Extension Multi-Tenant SaaS B2B portal Enterprise structure

Book a free
consultation call now

Online and fast

available time slots

Choose a time slot

Your benefits with the Multi-Tenant Extension:

One realm, many tenants: central configuration, no duplication

Token includes tenant context: applications react automatically

Flexible assignment: one user can belong to multiple tenants

Custom attributes per tenant: company name, region, contract data

Can be combined with User Portal for delegated administration

How the Multi-Tenant Extension works

Tenants as a context layer in the realm

The extension introduces a new layer: the tenant. Users are assigned to one or more tenants. Tenant context is included in the token – applications use it for tenant-specific logic.