Tenants

Overview

A Tenant is your organisation's dedicated boundary within the Cantara Platform. It defines where users, security, namespaces, gateways, licences, and integrations are managed. All administrative operations occur within the context of a specific tenant.

The Tenants screen lists all tenants you have access to and provides entry points to view and manage tenant details, including identity configuration and optional SCIM provisioning tokens.

Each tenant is created in a specific cloud region to meet performance and data sovereignty requirements, meaning configuration and data are not shared across tenants.

Most organisations will operate a single tenant. Multiple tenants are typically only required when data sovereignty, regulatory, or regional compliance requirements mean configuration and data must be hosted in separate cloud regions, or where a partner organisation manages multiple customer organisations that each need their own isolated tenant.

If enabled, SCIM provisioning tokens are generated and managed at the tenant level to integrate with external Identity Providers (IdPs).

Key points

• Ownership and Access – Each tenant has an Owner Group with full administrative access. Access is managed through Security Groups and Security Topics.

• Security Isolation – Tenants are fully isolated from each other, ensuring that configuration, logs, and administrative data are not shared across tenants.

• Region – Each tenant is assigned to a cloud region, which determines the physical data centre where the tenant's data and configuration are hosted. For details on region selection and why it matters, see Register a Tenant.

• Namespaces – Namespaces are created within a tenant to organise configuration by environment (e.g., development, testing, production).

• SCIM Provisioning (Optional) - If required, SCIM provisioning tokens can be generated and managed at the tenant level to integrate securely with external Identity Providers (IdPs).

• Lifecycle Operations – Administrative actions on a tenant (e.g., editing details, rotating provisioning tokens) take effect immediately.