Reputation: 174
I'm trying to configure the following scenario in WSO2
This is assuming that the permissions will be part of the info provided when authentication succeeds (such that the permissions can be used in my application).
Is this possible and if so, what am I missing?
Upvotes: 0
Views: 231
Reputation: 182
This is not possible. When SaaS Enabled the Service provider created from one tenant can be accessed across tenants. But when it comes to role-based permissions each tenant space is isolated. When you create a certain application with permissions for a super tenant it will be stored under the Super Admin Permissions (super tenant level) on the permission tree. When you are logging in as tenant WSO2 IS is using the permissions configured under the Admin Permissions (tenant level). So if you want to see the permissions in the Role editor of each tenant you might need to configure it separately for each tenant.
Please refer to the following documentation for further clarification https://docs.wso2.com/display/IS530/Role-based+Permissions
Upvotes: 1