Fist you have to build .war type artifact from your java project. If you put that .war file into your tomcat/webapps/ , at the starting point of tomcat server it will automatically extracted into the same location by creating a new folder.
In this blog post you will see how to add user approval workflow for a tenant in wso2 identity server. Here i’m using embedded BPS. You can use external BPS as well
If you create a service provider in a tenant , that service provider can be accessible within only that tenant. But if you want to give access accross all the tenant domains.