Yes, the problem would be that users should have direct access for each company, imagine that 10 companies would then have to put username and password for each, and even worse the same password and the same user