Friends!
Please tell me about the logic of the decision, I have been discussing with my colleagues for a long time and we cannot come to a common understanding.
Now I will explain our situation.
- We have a partner in China who makes the products we need.
- Then, we bring these products to Russia and assemble them in our workshop.
- Now we will have a partner in Europe.
- What do we have now?
- The site and the Russian ERP program, but it is not convenient for our partners and therefore we want to replace it with Moqui.
- We have a website, CRM and PIM + DAM.
- What do we want to do?
- Provide limited access to: ERP, CMS, DAM, CRM.
- Now we have a problem that one employee must have his own accounts in each system, although there is API integration, it does not solve the problem of single authorization.
- Provide new partners with a single panel so that they can install it on their server. But, by protecting this panel from copying. If a partner works with our company, he will use this panel free of charge, and if he does not cooperate, we will not let you use our panel.
- How do we see the solution?
- In a single panel, the Employee registers, selects his group and, after checking by the administrator, gets access.
- An employee with his own access rights can do his job.
- What’s the problem now?
- The main problem is where to write the user account (it is not reasonable to write to the database of all systems at the same time) and how to differentiate.
- For example, if an employee is registered with access to Moqui, then as I understand it, you need to provide a separate base for the panel, so that each system to identify the user addresses it (because of this, we have a dispute with colleagues). And, if an employee is registered with access only for the site, then access to Moqui is closed for him (even if he follows the link).
I’m not sure, but maybe all this integration will help us:
Of course, I wrote a lot 
but maybe someone did a similar thing and tell the logic and where to start, especially on Moqui.
We need the panel to act as a connecting bridge for employees and so that there is no chaos, while maintaining the level of encryption from possible hacks and spam. And, for the administrator, make it convenient to see all employees and partners in one place.