wso2身份服务器5.3.0用户和Oauth2的多租户配置准则（如果可能）

Question

Can anyone help me out with a guideline to configure a specific Service Provider to a specific Tenant only, ie exclude all tenants from accessing the specific Service Provider.

I tried creating Service Provider using the guidelines from: https://docs.wso2.com/display/IS530/Configuring+a+Service+Provider by the way I used oauth2 with Implicit flow.

Then I created multiple tenant domains like: abc.com xyz.com

I created rob under abc.com tenant and sam under xyz.com.

when I use url( https://localhost:9443/oauth2/authorize?response_type=token&client_id=my_client_id_was_here&redirect_uri=my_redirect_uri_was_here ) to login, login page showed up but I was ABLE to login using both rob and sam credentials.

What I want is to do is to restrict users of only one specific domain/tenant to access my service provider.

Thanks in advance

Answer 1

To restrict a service provider to a specific tenant, you have to create that service provider inside that tenant. So to create a SP inside "abc.com". Log into that tenant using a tenant user (rob@abc.com) and create the service provider inside it.