A tenant is a fully isolated environment: its own users, its own applications, and its own signing keys and issuer. A token presented across tenant lines fails signature verification — there is no shared, deployment-wide signing key. Use extra tenants for isolated environments such as staging vs production, or per-customer isolation if you're a B2B SaaS offering SSO to enterprise customers. Three are included with every account.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article