🏢Tenant-scoped usersThe same email can sign up under different tenants as separate users. Sessions, accounts, and verification records are scoped by tenant.
🔐Per-tenant OAuthStore OAuth client credentials per tenant in the database, encrypted at rest. Fall back to global providers when no tenant config exists.
🛠Management APIsCreate, update, list, and delete tenants and OAuth configs through typed Better Auth endpoints.
🔌Better Auth nativeAdds schema, endpoints, and a client plugin that integrate with Better Auth's adapter, session, and social provider systems.