mod-tlr needs to be able to synchronize users between tenants in a multi-tenant ECS environment. It needs to consume and handle user update events.

1. Consume user update event only published by the central tenant, ignore events published by data tenants to avoid an endless loop. In order to determine which tenant is central, make a call to GET /user-tenants?limit=1 and cache consortiumId (this is needed for step 2) and centralTenantId (that’s central tenant). This logic was already implemented in .

2. Using consortiumId from the previous step, call GET /consortia/{consortiumId}/tenants to get a list of all tenants of the current consortium.

3. Using a system user, update all of the users in all tenants except central (again, to avoid an endless loop).