Base organizations

Application clients can have base organizations configured. Base organizations close off a specific chunk of the organizational hierarchy and restrict the client to the organizations in that extracted hierarchy.

In addition, application types determine how base organization restriction applies. Access varies between different organizational levels depending on the type of application running the client:

Client configuration	Application type	Access
Base organization with child organizations	Hybrid	for members of the base and child organizations
Base organization without child organizations		for members of the base organization
Base organization with child organizations	Organization-only	for members of the child organizations only
Base organization without child organizations		⚠️no access possible
Base organization with child organizations	Simple	for members of the base organization only
Base organization without child organizations		for members of the base organization only

📘
Organization-only applications only handle access to the children of a base organizaiton.

Clients

Clients are the practical implementations of policy settings. Customers enter authentication flows, encounter your brand’s experience, and access their accounts by interacting with clients.

Clients put into practice the configurations applied to applications and/or organizations. However, configurations apply conditionally to clients: the experience customers will ultimately see on their screens may depend on the organizational affiliation of their account, not just the policies applied.

📘
Organization policy overrides allow you to provide organizations with their unique branding, communications, verification and authentication flows, or login options.