> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Enable tenant management

Tenant management allows a Service Provider administrator to set up an Identity Provider relationship with a child tenant. When enabled, tenant users can administer the tenant and log in to the tenant using Identity Provider authentication.

## Enable tenant management

1. Click Menu icon **>** **Service Provider > Tenants. The** **Tenants List** **page appears.**
2. Click Ellipsis Vertical icon next to the account that requires to have tenant management enabled.
3. Select **Tenant Management**. The **Set Tenant Management** dialog box appears.
4. Select **Enable Tenant Management**. Enabling this feature allows a user to log in to this tenant.
5. Optional. Create a **Default Resource Rule** for the tenant account. You can only create a default resource rule when you enable tenant management for the first time.
6. Optional. **Disable single sign-on** to force a user to re-authenticate whenever they attempt a new login.
7. Optional. **Prompt user for consent during authentication**. When enabled, users need to provide consent to access the application.
8. Optional. Enter the **Max authentication age** to set the maximum amount of time that can elapse before a user is required to re-authenticate during a new login attempt. Leave this field blank to disable this feature.
9. Select the **OIDC Signing Certificate** from the drop-down list.
10. Click **Confirm**. An **Enabled** flag appears in the **Tenant Management** column of the **Tenants List** page for the tenant account.

## Disable tenant management

1. If you need to disable tenant management for a tenant, do the following:
2. Click Menu icon **>** **Service Provider** > **Tenants**. The **Tenants List** page appears.
3. Click Ellipsis Vertical icon next to the tenant that needs to be disabled.
4. Select **Tenant Management**. The **Set Tenant Management** dialog box appears.
5. Deselect **Enable Tenant Management**.
6. Click **Confirm**. A **Disabled** flag appears in the **Tenant Management** column of the **Tenants List** page for the tenant account.