Set up multi-tenancy in Identity Platform
This quickstart shows you how to enable multi-tenancy in Identity Platform and create and select new tenants using the Google Cloud console.
To learn more about multi-tenancy in Identity Platform, see multi-tenancy .
To follow step-by-step guidance for this task directly in the Google Cloud console, click Guide me :
Before you begin
- Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.
-
In the Google Cloud console, on the project selector page, select or create a Google Cloud project.
Roles required to select or create a project
- Select a project : Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
- Create a project
: To create a project, you need the Project Creator role
(
roles/resourcemanager.projectCreator), which contains theresourcemanager.projects.createpermission. Learn how to grant roles .
-
Verify that billing is enabled for your Google Cloud project .
-
In the Google Cloud console, on the project selector page, select or create a Google Cloud project.
Roles required to select or create a project
- Select a project : Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
- Create a project
: To create a project, you need the Project Creator role
(
roles/resourcemanager.projectCreator), which contains theresourcemanager.projects.createpermission. Learn how to grant roles .
-
Verify that billing is enabled for your Google Cloud project .
Enable multi-tenancy
-
In the Google Cloud console, go to the Identity Platform > Settingspage.
Go to Settings -
Click the Securitytab.
-
In the Multi-tenancysection, click Allow tenants.
This enables multi-tenancy and opens the Tenantspage.
You are now ready to create your first tenant.
Create a tenant
-
In the Tenantspage, click Add tenant.
-
In the Namefield, enter a name for the tenant. This does not need to be unique; Identity Platform automatically assigns a distinct ID.
-
Click Save.
Congratulations! You've created an Identity Platform tenant.
Select a tenant
In the Settingspage, select your tenant from the Scope to a tenantlist.
Each tenant has its own providers and users. After you've selected a tenant, you can manage it the same way you manage a non-tenant Identity Platform project.
Disable multi-tenancy
To disable multi-tenancy, use the Identity Toolkit API .
