@dan Could a rule be set up such that if an already-provisioned user (e.g. johndoe@abc.com) from tenant A which logs into tenant B can perform a custom backend query that finds that user on tenant A, automatically lazy-import them into B, and finally provide successful login?

I wish to use multitenancy for custom login experience across tenants, but I don't necessarily care that the credentials for that email address are different.