This question might be beyond the scope of Hibernate but I didn't get any other valuable inputs in other forums.

I'm building an application that should serve multiple users and store their very sensitive data. My backend stack is built with spring-boot + Hibernate5. I want hibernate to handle multi-tenancy so I have 2 questions for the experts:

Providing I'm using schema-per-user paradigm:

1. Upon registration, what is the proper way to create a new schema on the fly?

2. How do I handle login? should all the authentication-related tables be in a different main schema? how do I maintain foreign keys between the main schema and user's schema then?

Usually, each tenant represents a Customer, not a User. Each Customer can still have multiple Users to access their schema.

That being said, the registration process can create a schema using a dedicated database user that is allowed to create schemas.

Then, when the users log in, they need to provide the Customer Identifier which designates the associated database schema.