I have been thinking of various ways to utilize Keycloak in a SaaS application. A separate realm per tenant is probably the most natural option, but how about using a single realm with individual clients for each tenant, would that make any sense? I think it would have its advantages (eg. the SaaS service provider could use a single account to access any tenant, and tenants could register themselves as clients when being deployed?).

Best regards,

Thomas