<div dir="ltr"><div style="font-size:12.8000001907349px">I've been using Keycloak for quite some time now on a couple of projects, and it's absolutely awesome - it just does the right thing, straight out of the box.</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">However, what I found quite confusing is the "Realm" definition which is missing from the documentation.</div><div style="font-size:12.8000001907349px">I'm trying to add multi-tenancy support to our application and found it a bit confusing. It seems that Keycloak's approach to multitenancy is "Realm per tenant" - which makes sense, until it comes to realisation that the applications only exist within realms. This implies that if there are few hundreds of tenants (i.e. organisations using the application), the task of changing application config (i.e. adding application-level role or adding/removing redirect URL) becomes maintenance nightmare.</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">Is it at all possible to define a "global", not realm-confined application in Keycloak? Would it be hard to implement? Happy to put some effort into it and send a pull request.</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">A bit more context:</div><div style="font-size:12.8000001907349px">- I have an webapp that serves multiple organisations.</div><div style="font-size:12.8000001907349px">- Each organisation has its own users and admins (who can create users and other admins).</div><div style="font-size:12.8000001907349px">- There is a "Super" administrator who creates organisations and admins.</div><div style="font-size:12.8000001907349px">- Webapp can recognise the organisation based on Company ID or domain name.</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">Many thanks in advance.</div><div class="" style="font-size:12.8000001907349px"></div>
</div>