In a Multi Tenant Application, how does social logic with multiple tenants work? Is there just a sole account that uses the same social connection(oauth-google-2)?
How does account linking across multiple LDAP agents work? Is it just another connection attached to the account?
Handling users in multi tenant applications is outlined in our Using Auth0 with Multi-tenant applications tutorial. In short, there would be a single account for a social user (e.g. Google), with roles and permissions stored in the user profile, e.g. in app_metadata.
Multiple LDAP connections can be configured, with account linking done between users in the different connections.