Enable tenant management

Tenant management allows a Service Provider administrator to set up an Identity Provider relationship with a child tenant. When enabled, tenant users can administer the tenant and log in to the tenant using Identity Provider authentication.

Enable tenant management

1. Click > Service Provider > Tenants. The Tenants List page appears.
2. Click next to the account that requires to have tenant management enabled.
3. Select Tenant Management. The Set Tenant Management dialog box appears.
4. Select Enable Tenant Management. Enabling this feature allows a user to log in to this tenant.
5. Optional. Create a Default Resource Rule for the tenant account. You can only create a default resource rule when you enable tenant management for the first time.
6. Optional. Disable single sign-on to force a user to re-authenticate whenever they attempt a new login.
7. Optional. Prompt user for consent during authentication. When enabled, users need to provide consent to access the application.
8. Optional. Enter the Max authentication age to set the maximum amount of time that can elapse before a user is required to re-authenticate during a new login attempt. Leave this field blank to disable this feature.
9. Select the OIDC Signing Certificate from the drop-down list.
10. Click Confirm. An Enabled flag appears in the Tenant Management column of the Tenants List page for the tenant account.

Disable tenant management

1. If you need to disable tenant management for a tenant, do the following:
2. Click > Service Provider > Tenants. The Tenants List page appears.
3. Click next to the tenant that needs to be disabled.
4. Select Tenant Management. The Set Tenant Management dialog box appears.
5. Deselect Enable Tenant Management.
6. Click Confirm. A Disabled flag appears in the Tenant Management column of the Tenants List page for the tenant account.