# How do you structure your identities?

**URL:** <https://openziti.discourse.group/t/how-do-you-structure-your-identities/1490>\
**Category:** Uncategorized\
**Created:** [August 13, 2023, 8:30am UTC](https://openziti.discourse.group/t/how-do-you-structure-your-identities/1490 "2023-08-13T08:30:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jptechnical](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jptechnical/32/1089_2.png) [@jptechnical](https://openziti.discourse.group/u/jptechnical)\
**Post date:** [August 13, 2023, 8:30am UTC](https://openziti.discourse.group/t/how-do-you-structure-your-identities/1490/1 "2023-08-13T08:30:59Z")

</div>

I’m looking at a Greenfield deployment and I’m having some analysis paralysis.

The system will be for multiple tenants (customers) and will be almost entirely tunnels to dark services (if I have that term right) and device identities, mostly windows desktops as clients.

I would like to have a structure that allows for easy visual identification of devices, like ‘sally-desktop.customername.ziti’ so I can use services with wildcards like ‘\*.customername.ziti’

I would also like role attributes that are also easy to identify.

How do you name identities?  
How do you name attributes?

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [August 13, 2023, 12:58pm UTC](https://openziti.discourse.group/t/how-do-you-structure-your-identities/1490/2 "2023-08-13T12:58:33Z")

</div>

Not sure you’ll find any hard/fast answers on this one but I wanted to provide some feedback/thoughts. If it were me, I’d namespace the identities and attributes in a similar fashion. I would probably use the customer name first for attributes, that way they can be sorted logically customer1\_hr, customer2\_hr, customer2\_devs, etc. The identity names I think you’ll have to stick to the scheme you already identified. TBH though, I’ve not done this myself other than my own tinkering. You might have to try it out to see how it feels.