Isolated Identity Realms

Applications with this capability — Partition users, credentials, roles, groups, clients, and policies into identity domains administered independently.