Not sure about multi-tenancy, but I’ve been using VerneMQ with the Postgesql auth backend.