{"id":100,"date":"2026-07-20T10:00:00","date_gmt":"2026-07-20T04:30:00","guid":{"rendered":"https:\/\/softcrony.com\/blog\/?p=100"},"modified":"2026-07-20T10:00:00","modified_gmt":"2026-07-20T04:30:00","slug":"multi-tenant-saas-laravel-13-guide","status":"publish","type":"post","link":"https:\/\/softcrony.com\/blog\/multi-tenant-saas-laravel-13-guide\/","title":{"rendered":"Building a Multi-Tenant SaaS in Laravel 13: Complete Guide"},"content":{"rendered":"

Multi-tenancy is the architecture that makes SaaS possible \u2014 one application serving many customers, with their data completely isolated from each other. Laravel 13 makes this cleaner than ever with PHP Attributes, improved middleware, and better tooling.<\/p>\n

This guide builds a complete multi-tenant foundation in Laravel 13 \u2014 the patterns we use at Softcrony for client SaaS projects.<\/p>\n

Multi-Tenancy Strategies<\/h2>\n

There are three main approaches to multi-tenancy in Laravel:<\/p>\n\n\n\n\n\n\n\n
Strategy<\/th>\nHow It Works<\/th>\nBest For<\/th>\nComplexity<\/th>\n<\/tr>\n<\/thead>\n
Single DB, shared tables<\/td>\ncompany_id column on every table<\/td>\nMost SaaS apps<\/td>\nLow<\/td>\n<\/tr>\n
Single DB, separate schemas<\/td>\nMySQL schema per tenant<\/td>\nMid-scale, stronger isolation<\/td>\nMedium<\/td>\n<\/tr>\n
Separate databases<\/td>\nOne database per tenant<\/td>\nEnterprise, regulated industries<\/td>\nHigh<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

This guide implements Strategy 1 \u2014 Single DB with shared tables<\/strong>. It handles 95% of SaaS use cases and is the simplest to build and maintain.<\/p>\n

Step 1 \u2014 Database Architecture<\/h2>\n
php artisan make:migration create_tenants_table\r\nphp artisan make:migration create_tenant_users_table<\/code><\/pre>\n
<?php\r\n\r\n\/\/ Tenants (companies\/organizations)\r\nSchema::create('tenants', function (Blueprint $table) {\r\n    $table->id();\r\n    $table->string('name');\r\n    $table->string('slug')->unique(); \/\/ used for subdomain\r\n    $table->string('domain')->nullable()->unique(); \/\/ custom domain\r\n    $table->string('plan')->default('free'); \/\/ free\/starter\/pro\/enterprise\r\n    $table->string('status')->default('active'); \/\/ active\/suspended\/cancelled\r\n    $table->json('settings')->nullable();\r\n    $table->timestamp('trial_ends_at')->nullable();\r\n    $table->timestamps();\r\n    $table->softDeletes();\r\n});\r\n\r\n\/\/ Users belong to tenants\r\nSchema::create('tenant_users', function (Blueprint $table) {\r\n    $table->id();\r\n    $table->foreignId('tenant_id')->constrained()->onDelete('cascade');\r\n    $table->foreignId('user_id')->constrained()->onDelete('cascade');\r\n    $table->string('role')->default('member'); \/\/ owner\/admin\/member\r\n    $table->timestamps();\r\n\r\n    $table->unique(['tenant_id', 'user_id']);\r\n});\r\n\r\n\/\/ All your feature tables need tenant_id\r\nSchema::create('projects', function (Blueprint $table) {\r\n    $table->id();\r\n    $table->foreignId('tenant_id')->constrained()->onDelete('cascade');\r\n    $table->foreignId('user_id')->constrained(); \/\/ creator\r\n    $table->string('name');\r\n    $table->text('description')->nullable();\r\n    $table->string('status')->default('active');\r\n    $table->timestamps();\r\n    $table->softDeletes();\r\n\r\n    $table->index('tenant_id'); \/\/ Always index tenant_id\r\n});<\/code><\/pre>\n
Step 2 \u2014 Tenant Model with Laravel 13 Attributes<\/h2>\n
php artisan make:model Tenant<\/code><\/pre>\n
<?php\r\n\r\nnamespace App\\Models;\r\n\r\nuse Illuminate\\Database\\Eloquent\\Attributes\\Table;\r\nuse Illuminate\\Database\\Eloquent\\Attributes\\Fillable;\r\nuse Illuminate\\Database\\Eloquent\\Model;\r\nuse Illuminate\\Database\\Eloquent\\SoftDeletes;\r\nuse Illuminate\\Database\\Eloquent\\Relations\\HasMany;\r\nuse Illuminate\\Database\\Eloquent\\Relations\\BelongsToMany;\r\n\r\n#[Table('tenants')]\r\n#[Fillable(['name', 'slug', 'domain', 'plan', 'status', 'settings', 'trial_ends_at'])]\r\nclass Tenant extends Model\r\n{\r\n    use SoftDeletes;\r\n\r\n    protected $casts = [\r\n        'settings'      => 'array',\r\n        'trial_ends_at' => 'datetime',\r\n    ];\r\n\r\n    public function users(): BelongsToMany\r\n    {\r\n        return $this->belongsToMany(User::class, 'tenant_users')\r\n            ->withPivot('role')\r\n            ->withTimestamps();\r\n    }\r\n\r\n    public function projects(): HasMany\r\n    {\r\n        return $this->hasMany(Project::class);\r\n    }\r\n\r\n    public function isOnTrial(): bool\r\n    {\r\n        return $this->trial_ends_at && $this->trial_ends_at->isFuture();\r\n    }\r\n\r\n    public function hasFeature(string $feature): bool\r\n    {\r\n        return in_array($feature, config(\"plans.{$this->plan}.features\", []));\r\n    }\r\n}<\/code><\/pre>\n
Step 3 \u2014 Tenant Resolution<\/h2>\n
The most important part \u2014 identifying which tenant owns the current request:<\/p>\n
php artisan make:class Services\/TenantResolver<\/code><\/pre>\n
<?php\r\n\r\nnamespace App\\Services;\r\n\r\nuse App\\Models\\Tenant;\r\nuse Illuminate\\Http\\Request;\r\n\r\nclass TenantResolver\r\n{\r\n    public function fromRequest(Request $request): ?Tenant\r\n    {\r\n        \/\/ 1. Try subdomain: company.yourapp.com\r\n        $host = $request->getHost();\r\n        $appDomain = config('app.domain', 'yourapp.com');\r\n\r\n        if (str_ends_with($host, '.' . $appDomain)) {\r\n            $slug = str_replace('.' . $appDomain, '', $host);\r\n            return Tenant::where('slug', $slug)->where('status', 'active')->first();\r\n        }\r\n\r\n        \/\/ 2. Try custom domain\r\n        return Tenant::where('domain', $host)->where('status', 'active')->first();\r\n    }\r\n\r\n    public function fromUser(): ?Tenant\r\n    {\r\n        \/\/ Get tenant from authenticated user's context\r\n        return auth()->user()?->currentTenant();\r\n    }\r\n}<\/code><\/pre>\n
Step 4 \u2014 Tenant Context (Singleton)<\/h2>\n
php artisan make:class TenantContext<\/code><\/pre>\n
<?php\r\n\r\nnamespace App;\r\n\r\nuse App\\Models\\Tenant;\r\n\r\nclass TenantContext\r\n{\r\n    private static ?Tenant $current = null;\r\n\r\n    public static function set(Tenant $tenant): void\r\n    {\r\n        static::$current = $tenant;\r\n    }\r\n\r\n    public static function get(): ?Tenant\r\n    {\r\n        return static::$current;\r\n    }\r\n\r\n    public static function id(): ?int\r\n    {\r\n        return static::$current?->id;\r\n    }\r\n\r\n    public static function clear(): void\r\n    {\r\n        static::$current = null;\r\n    }\r\n\r\n    public static function require(): Tenant\r\n    {\r\n        if (!static::$current) {\r\n            throw new \\RuntimeException('No tenant context set');\r\n        }\r\n        return static::$current;\r\n    }\r\n}<\/code><\/pre>\n
Step 5 \u2014 Tenant Middleware<\/h2>\n
php artisan make:middleware InitializeTenant<\/code><\/pre>\n
<?php\r\n\r\nnamespace App\\Http\\Middleware;\r\n\r\nuse App\\TenantContext;\r\nuse App\\Services\\TenantResolver;\r\nuse Closure;\r\nuse Illuminate\\Http\\Request;\r\n\r\nclass InitializeTenant\r\n{\r\n    public function __construct(\r\n        private readonly TenantResolver $resolver\r\n    ) {}\r\n\r\n    public function handle(Request $request, Closure $next)\r\n    {\r\n        $tenant = $this->resolver->fromRequest($request);\r\n\r\n        if (!$tenant) {\r\n            abort(404, 'Tenant not found');\r\n        }\r\n\r\n        \/\/ Set tenant context for this request\r\n        TenantContext::set($tenant);\r\n\r\n        \/\/ Make tenant available in views\r\n        view()->share('tenant', $tenant);\r\n\r\n        return $next($request);\r\n    }\r\n}<\/code><\/pre>\n
Register in bootstrap\/app.php<\/code>:<\/p>\n
->withMiddleware(function (Middleware $middleware) {\r\n    $middleware->alias([\r\n        'tenant' => \\App\\Http\\Middleware\\InitializeTenant::class,\r\n    ]);\r\n})<\/code><\/pre>\n
Step 6 \u2014 Tenant Global Scope<\/h2>\n
This is the core security layer \u2014 automatically filtering all queries by the current tenant:<\/p>\n
<?php\r\n\r\nnamespace App\\Models\\Scopes;\r\n\r\nuse App\\TenantContext;\r\nuse Illuminate\\Database\\Eloquent\\Builder;\r\nuse Illuminate\\Database\\Eloquent\\Model;\r\nuse Illuminate\\Database\\Eloquent\\Scope;\r\n\r\nclass TenantScope implements Scope\r\n{\r\n    public function apply(Builder $builder, Model $model): void\r\n    {\r\n        $tenantId = TenantContext::id();\r\n\r\n        if ($tenantId) {\r\n            $builder->where($model->getTable() . '.tenant_id', $tenantId);\r\n        }\r\n    }\r\n}\r\n\r\n\/\/ Trait to add to all tenant-scoped models\r\ntrait BelongsToTenant\r\n{\r\n    protected static function bootBelongsToTenant(): void\r\n    {\r\n        \/\/ Apply scope on all queries\r\n        static::addGlobalScope(new TenantScope());\r\n\r\n        \/\/ Auto-set tenant_id on create\r\n        static::creating(function (Model $model) {\r\n            if (!$model->tenant_id && TenantContext::id()) {\r\n                $model->tenant_id = TenantContext::id();\r\n            }\r\n        });\r\n    }\r\n}<\/code><\/pre>\n
Use the trait on all tenant-scoped models:<\/p>\n
<?php\r\n\r\nnamespace App\\Models;\r\n\r\nuse App\\Models\\Scopes\\BelongsToTenant;\r\nuse Illuminate\\Database\\Eloquent\\Attributes\\Fillable;\r\nuse Illuminate\\Database\\Eloquent\\Model;\r\n\r\n#[Fillable(['name', 'description', 'status', 'tenant_id', 'user_id'])]\r\nclass Project extends Model\r\n{\r\n    use BelongsToTenant;\r\n\r\n    \/\/ All queries automatically scoped to current tenant\r\n    \/\/ tenant_id automatically set on create\r\n}<\/code><\/pre>\n
Step 7 \u2014 Subdomain Routing<\/h2>\n
\/\/ routes\/web.php\r\nRoute::domain('{tenant}.' . config('app.domain'))\r\n    ->middleware(['tenant', 'auth'])\r\n    ->group(function () {\r\n        Route::get('\/dashboard', [DashboardController::class, 'index'])->name('dashboard');\r\n        Route::resource('projects', ProjectController::class);\r\n        Route::resource('tasks', TaskController::class);\r\n    });<\/code><\/pre>\n
Step 8 \u2014 Tenant Registration Flow<\/h2>\n
<?php\r\n\r\nnamespace App\\Http\\Controllers;\r\n\r\nuse App\\Models\\Tenant;\r\nuse App\\Models\\User;\r\nuse Illuminate\\Http\\Request;\r\nuse Illuminate\\Support\\Facades\\DB;\r\nuse Illuminate\\Support\\Facades\\Hash;\r\nuse Illuminate\\Support\\Str;\r\n\r\nclass TenantRegistrationController extends Controller\r\n{\r\n    public function store(Request $request)\r\n    {\r\n        $validated = $request->validate([\r\n            'company_name' => 'required|string|max:255',\r\n            'name'         => 'required|string|max:255',\r\n            'email'        => 'required|email|unique:users',\r\n            'password'     => 'required|min:8|confirmed',\r\n        ]);\r\n\r\n        return DB::transaction(function () use ($validated) {\r\n            \/\/ Create tenant\r\n            $tenant = Tenant::create([\r\n                'name'          => $validated['company_name'],\r\n                'slug'          => Str::slug($validated['company_name']),\r\n                'plan'          => 'free',\r\n                'trial_ends_at' => now()->addDays(14),\r\n            ]);\r\n\r\n            \/\/ Create owner user\r\n            $user = User::create([\r\n                'name'     => $validated['name'],\r\n                'email'    => $validated['email'],\r\n                'password' => Hash::make($validated['password']),\r\n            ]);\r\n\r\n            \/\/ Attach user to tenant as owner\r\n            $tenant->users()->attach($user->id, ['role' => 'owner']);\r\n\r\n            \/\/ Seed default data for the new tenant\r\n            app(TenantSeeder::class)->run($tenant);\r\n\r\n            return redirect(\"https:\/\/{$tenant->slug}.\" . config('app.domain') . '\/dashboard');\r\n        });\r\n    }\r\n}<\/code><\/pre>\n
Step 9 \u2014 Plan and Feature Management<\/h2>\n
\/\/ config\/plans.php\r\nreturn [\r\n    'free' => [\r\n        'name'     => 'Free',\r\n        'price'    => 0,\r\n        'features' => ['projects:5', 'users:2', 'storage:1gb'],\r\n    ],\r\n    'starter' => [\r\n        'name'     => 'Starter',\r\n        'price'    => 999, \/\/ \u20b9999\/month\r\n        'features' => ['projects:25', 'users:10', 'storage:10gb', 'api_access'],\r\n    ],\r\n    'pro' => [\r\n        'name'     => 'Pro',\r\n        'price'    => 2999,\r\n        'features' => ['projects:unlimited', 'users:unlimited', 'storage:100gb', 'api_access', 'priority_support'],\r\n    ],\r\n];<\/code><\/pre>\n
\/\/ Middleware to check plan features\r\nclass RequireFeature\r\n{\r\n    public function handle(Request $request, Closure $next, string $feature)\r\n    {\r\n        $tenant = TenantContext::require();\r\n\r\n        if (!$tenant->hasFeature($feature)) {\r\n            return response()->json([\r\n                'error'   => 'upgrade_required',\r\n                'message' => 'This feature requires a higher plan.',\r\n                'upgrade' => route('billing.upgrade'),\r\n            ], 403);\r\n        }\r\n\r\n        return $next($request);\r\n    }\r\n}\r\n\r\n\/\/ Usage in routes\r\nRoute::middleware(['tenant', 'auth', 'feature:api_access'])->group(function () {\r\n    Route::apiResource('api\/v1\/projects', ApiProjectController::class);\r\n});<\/code><\/pre>\n
Step 10 \u2014 Razorpay Subscription Billing<\/h2>\n
composer require razorpay\/razorpay<\/code><\/pre>\n
<?php\r\n\r\nnamespace App\\Services;\r\n\r\nuse App\\Models\\Tenant;\r\nuse Razorpay\\Api\\Api;\r\n\r\nclass BillingService\r\n{\r\n    private Api $razorpay;\r\n\r\n    public function __construct()\r\n    {\r\n        $this->razorpay = new Api(\r\n            config('services.razorpay.key'),\r\n            config('services.razorpay.secret')\r\n        );\r\n    }\r\n\r\n    public function createSubscription(Tenant $tenant, string $plan): array\r\n    {\r\n        $planConfig = config(\"plans.{$plan}\");\r\n\r\n        \/\/ Create Razorpay plan if not exists\r\n        $razorpayPlan = $this->razorpay->plan->create([\r\n            'period'   => 'monthly',\r\n            'interval' => 1,\r\n            'item'     => [\r\n                'name'     => $planConfig['name'] . ' Plan',\r\n                'amount'   => $planConfig['price'] * 100, \/\/ paise\r\n                'currency' => 'INR',\r\n            ],\r\n        ]);\r\n\r\n        \/\/ Create subscription\r\n        $subscription = $this->razorpay->subscription->create([\r\n            'plan_id'         => $razorpayPlan->id,\r\n            'total_count'     => 12, \/\/ 12 months\r\n            'customer_notify' => 1,\r\n            'notes'           => ['tenant_id' => $tenant->id],\r\n        ]);\r\n\r\n        $tenant->update([\r\n            'plan'                    => $plan,\r\n            'razorpay_subscription_id' => $subscription->id,\r\n        ]);\r\n\r\n        return ['subscription_id' => $subscription->id];\r\n    }\r\n}<\/code><\/pre>\n
Security Checklist for Multi-Tenant Apps<\/h2>\n\n\n\n\n\n\n\n\n\n\n\n\n
Check<\/th>\nImplementation<\/th>\n<\/tr>\n<\/thead>\n
All tenant tables have tenant_id index<\/td>\nMigration<\/td>\n<\/tr>\n
Global scope on all tenant models<\/td>\nBelongsToTenant trait<\/td>\n<\/tr>\n
Tenant middleware on all tenant routes<\/td>\nRoute middleware<\/td>\n<\/tr>\n
File uploads scoped to tenant folder<\/td>\nStorage::disk()->put(“tenant_{id}\/…”)<\/td>\n<\/tr>\n
Redis cache keys prefixed with tenant_id<\/td>\nCache::prefix(“tenant_{id}”)<\/td>\n<\/tr>\n
Queued jobs include tenant_id context<\/td>\nJob middleware<\/td>\n<\/tr>\n
API rate limits per tenant<\/td>\nRateLimiter::for()<\/td>\n<\/tr>\n
Cross-tenant query test in test suite<\/td>\nPHPUnit feature test<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
If you’re planning to build a SaaS product and need a solid multi-tenant foundation, our Laravel team at Softcrony can architect and build it for you<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Multi-tenancy is the architecture that makes SaaS possible \u2014 one application serving many customers, with their data completely isolated from each other. Laravel 13 makes this cleaner than ever with PHP Attributes, improved middleware, and better tooling. This guide builds a complete multi-tenant foundation in Laravel 13 \u2014 the patterns we use at Softcrony for […]<\/p>\n","protected":false},"author":1,"featured_media":102,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[102,19,88,101,30,44],"class_list":["post-100","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops","tag-architecture","tag-laravel","tag-laravel-13","tag-multi-tenant","tag-php","tag-saas"],"_links":{"self":[{"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/posts\/100","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/comments?post=100"}],"version-history":[{"count":1,"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/posts\/100\/revisions"}],"predecessor-version":[{"id":101,"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/posts\/100\/revisions\/101"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/media\/102"}],"wp:attachment":[{"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/media?parent=100"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/categories?post=100"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softcrony.com\/blog\/wp-json\/wp\/v2\/tags?post=100"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}