What is this about?
For multi-tenant systems, you should pass the tenant and role via an SSO claim (see the guide: SSO Role and Tenant Assignment in softgarden). This ensures the user lands directly in the correct tenant with the appropriate role.
Recommended (via SSO claims)
Pass the tenant (e.g., as `tenantId`)
Pass the role (e.g., Reviewer, Recruiter, Admin)
Find details and examples here: SSO role and tenant assignment.
If nothing is passed
The user is always created in the main tenant (top-level tenant).
The user is automatically assigned the lowest-level role (usually Reviewer).
Common pitfalls
Only a role is sent, without a tenant → User ends up in the main tenant.
Group mapping is ambiguous (one group → multiple tenants).
Claim names or formats differ from the configuration.