---
title: "OpenID in Multi-Tenancy"
slug: "multi-tenancy-openid"
tags: ["OpenID Integration", "OpenID", "Multi-Tenancy ", "SSO", "Single Sign On"]
updated: 2025-05-19T21:45:43Z
published: 2025-05-19T21:45:43Z
canonical: "documentation.decisions.com/multi-tenancy-openid"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.decisions.com/llms.txt
> Use this file to discover all available pages before exploring further.

# OpenID in Multi-Tenancy

## Overview

Through the use of the [**OpenID Module**](https://documentation.decisions.com/v9/docs/openid-integration), **Accounts** can be created via an OpenId **Identity Provider**, and utilized within a website that is setup to accept OpenID authentication. In addition to [**Standard Server**](https://documentation.decisions.com/v9/docs/multi-tenancy-architecture?highlight=standard%20server#:~:text=a%20resource%20perspective.-,Standard%20Server,-In%20a%20Standard) environments, this Module can be utilized to create **Accounts** that can be implemented and used for [SSO](https://documentation.decisions.com/v9/docs/sso-basics) across a **Multi-Tenant** environment. The following document demonstrates how to setup **OpenID** for a **v.9 Multi-Tenancy** environment.

### Prerequisites

- Pre-existing **OpenID Account**
- Access to an OpenID API
- **Single Sign On** set to **True** in **Settings.xml**
- [Restarting the Instance](https://documentation.decisions.com/v9/docs/restart-decisions-application) post Settings.xml-configuration

### Best Practices

While configuring SSO, perform any testing in an **incognito window** while the **Admin** **session** is ran from the normal window; keep this Admin session open until the system setup has been completed and Portal function can be confirmed stable.

---

## Setup

1. From the [**Control Instance**](https://documentation.decisions.com/v9/docs/multi-tenancy-setting-up-a-control-instance#:~:text=the%20Host%C2%A0Server%C2%A0is%20referred%20to%20as%20the%20Control%C2%A0Instance), navigate to **System > Identity Providers** , then INSTALL the **OpenId Module**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/OpenID%20MT%201.png)![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1746037743367.png)
2. After installing the Module, navigate to **System > Settings > OpenID Settings**.  
  
Then, enable the **Enabled** checkbox, and click ADD under **Identity Providers**.![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1746037754779.png)
3. In the resulting **Add Identity Providers** window, configure the respective **IdP Name**, **Client ID**, **Client Secret**, and **Discovery URL** values.  
  
Then, uncheck **Verified Email Addresses only**, click OK.![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1746037777421.png)
4. Back in the **Edit Open Id Settings** window, select the newly added **Identity Provider** from the **Primary Identity Provider** dropdown, and click SAVE.![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1746037860130.png)
5. Open an incognito window and navigate to the **Control Instance**. From the resulting **OpenID Page**, click **Sign In with Google**.  
  
Then, provide the desired Google login credentials. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2022-04-18_11h00_09.png)
6. Back in the original **Portal** window, navigate to **System > Hosting > [Name of Desired Instance]** and click ADD INSTANCE ACCOUNT.  
  
PICK the **Account** that was added to the **Control Instance** via **OpenID**. Then, click OK. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1746038467407.png)
7. Navigate to the [**Tenant Instance**](https://documentation.decisions.com/v9/docs/multi-tenancy-adding-and-setting-up-a-tenant-instance); upon seeing the **OpenID** screen, select **Sign in with Google**, and attempt to sign in with the **OAuth Account's** credentials. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2022-04-18_12h20_02.png)
8. Verify that the OpenID Module allows login to the user **Portal** of the **Tenant Instance**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2022-04-18_13h22_29.png)

---

For more information regarding Multi-Tenancy, see [Decisions Forum: Multi-Tenant](https://support.decisions.com/forum/forum23-multitenant.aspx).