It is subordinate to the provider organization and is created by the SPA.
Users can be provisioned in a full organization.
In the example shown in Figure A–1, user2 belongs to the sesta.com domain and has a mail address of firstname.lastname@example.org.
As a full organization, it has its own domain that no other organization can share, and it has its own unique namespace.
In the example shown in Figure A–1, the full organization, SESTA, has the domain name sesta.com.