Story: Tenant provisioning wizards
Table of Contents
This page documents a story in Sprint 12. It captures the goal, current status, acceptance criteria, and the tasks that compose it.
Goal
Polish the tenant-provisioning experience: enforce root-party invariants; introduce the new wizard with GLEIF or synthetic paths; gate by tenant type; round of UX polish; first-login onboarding for evaluation tenants.
Status
| Field | Value |
|---|---|
| State | DONE |
| Parent sprint | Sprint 12 |
| Now | Completed 2026-02-16. |
| Waiting on | None. |
| Next | None. |
| Last touched | 2026-02-16 |
Acceptance
- Root-party invariant enforced (exactly two: system + operational).
- Wizard supports GLEIF or synthetic flow; ores.synthetic component in place.
- Party/counterparty wizard steps gated by tenant type.
- Wizard UX polished (naming, defaults, password indicator, etc.).
- First-login onboarding wizard for evaluation tenants.
Tasks
| Task | State | Start | End | Description |
|---|---|---|---|---|
| Enforce root party uniqueness constraints | DONE | 2026-05-19 | 2026-02-12 | Each tenant has exactly two root parties: one system (auto-created) and one operational (the 'house'). Service-layer validation prevents additional roots. |
| Add setup-new-tenant wizard | DONE | 2026-05-19 | 2026-02-13 | Tenant provisioner UI: GLEIF-based or synthetic party setup; counterparty setup; clear that it's evaluation. Synthetic subsystem in ores.synthetic (organisation_generator_service + organisation_publisher_service); tree_builder utility; protocol range 0x7000-0x7FFF. |
| Gate party + counterparty wizard steps by tenant type | DONE | 2026-05-19 | 2026-02-14 | Party / counterparty setup only enabled for evaluation tenants; production tenants see the steps disabled with explanation. |
| Improve tenant provisioning wizard UX | DONE | 2026-05-19 | 2026-02-15 | Rename to evoke 'evaluation tenant provisioning'; move off main menu, access via tenants-dialog icon; capitalise tenant-type values; tenant code column narrower; default to evaluation; system-party name evokes 'tenant system party'; root party defaults to tenant name; password-match indicator. |
| Add evaluation-tenant onboarding wizard on first login | DONE | 2026-05-19 | 2026-02-16 | First-login wizard offers to install a catalogue + set up the tenant; user can cancel; stops appearing once a root party exists beyond the system party. |
Decisions
- Evaluation-only paths surfaced clearly
- the wizard now states this is for evaluation tenants.
- Synthetic + GLEIF as alternatives
- not all evaluations want LEI-based data.
Out of scope
- Production-tenant onboarding workflow.
See also
- System Provisioner Wizard (sprint 10) — predecessor wizard pattern.