SSO on multiple organizations

Grafana Authentication
1

I currently use grafana in my company, we provide services to other companies and provide some dashboards in grafana.

To facilitate our access to grafana, we configured the integration with Azure AD with saml, but the integration only works for our root organization, for the other orgs we were able to add permission, but as soon as the user leaves grafana he comes back. loses permission to other organizations.

Is there any way to perform the integration for all organizations?

2

I met this issue before.

Multiple AD groups could be mapped to multiple Orgs in LDAP authentication as this could be configured in ldap.toml, but not in OIDC. As an alternative, I just created a single Org but created several teams for end users, let them manage the permission of each,

3

Grafana SAML auth also supports groups/org mapping.