3 ms·

We have this feature and it is called B2B SSO: https://www.ory.sh/docs/kratos/organizations https://www.ory.sh/docs/kratos/organizations

• aidos 3y ago
  Interesting. Any more details available on what’s configurable? How does it work out pricing wise?
  • arekkas 3y ago
    The flow is essentially what you see in the small video on the docs page and can be set up in the Ory Network Console with a few clicks. I agree though that the docs here are a bit thin. Pricing wise this is available on the Scale tier currently dubbed as "Enterprise SSO" although "B2B Organizations" probably would be more correct: https://www.ory.sh/pricing/ https://www.ory.sh/pricing/ There are no limits to how many organizations you can have. Regarding MFA - the MFA enforcement typically is the responsibility of the IDP the company owns. So for example dean@companyA.com use Okta and they enforce 2FA for their users. anna@companyB.com use OneLogin and they do not enforce MFA.
    • aidos 3y ago
      Thanks. In terms of other enforcement, I meant more wrt to an organisation that _didn't_ use another IDP but still wanted to apply PW policies (for example) on their domain. Could you create an Ory project (sorry, don't know all your terminology) to forward on to? Something like: Our app -> Ory -> split by domain -> Ory for specific domain -> Policies.
    • lmeyerov 3y ago
      So not OSS?