Best practice for keycloak multi-tenancy

Also interested in how this can be implemented. Currently considering if KC is the way to go for our product.