do you want to associate a ID store with AD at the vshpere.local level ?
do you add the tenant and then add an ID store to each tenant ?
am going to need several unique tenants , from what I am seeing is it is designed to allow separate tenants to use separate domains for the ID store .
The customer has a single domain but has several sub organizations that I want to set up as separate tenants
So can I set up an ID store for
1. Vsphere.local
2. Sub org AAC
3. Sub org NSA