SaaS Tenant Management

BC-4230 Level 1 Software & Technology 226 providers 334 API surfaces 135 rated strong or better

Provisioning, configuration, isolation, region placement, identity federation, and per-tenant data export of tenants in the multi-tenant service.

SaaS Tenant Management (BC-4230) is a level-1 business capability in the Software & Technology model. The catalog holds 334 API surface(s) from 226 provider(s) that can perform some part of it, 135 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.

Where this capability definition comes from. This capability is part of a published business-architecture model that API Evangelist did not author. It is redistributed here under CC-BY-4.0. Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented. Source repository · NOTICE and third-party framework attributions

Authorities this capability cites

Cited by the capability model itself. These frameworks are referenced, never redistributed, and citing one does not imply its owner endorses this listing.

Sub-capabilities

Tenant Provisioning & Lifecycle BC-4230.10

Creation, suspension, decommissioning, and migration of tenants in the multi-tenant fleet.

129 providers, 157 API surfaces

Tenant Configuration Management BC-4230.20

Per-tenant feature configuration, branding, and limits applied above the shared product baseline.

29 providers, 34 API surfaces

Tenant Isolation Management BC-4230.30

Mechanisms that maintain logical and physical isolation between tenants across data, compute, and access paths.

no catalog coverage

Data Residency & Region Placement BC-4230.40

Assignment of tenants to regions, enforcement of data-residency commitments, and management of cross-region replication policy.

1 provider, 1 API surface

Tenant Identity Federation BC-4230.50

Federation of tenant identity providers and lifecycle of tenant user accounts via single sign-on and SCIM.

84 providers, 122 API surfaces

Tenant Backup & Export Management BC-4230.60

Per-tenant data export, deletion, and restore capabilities exposed to tenants and administrators.

3 providers, 3 API surfaces

Providers that reach this capability

Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.

Exemplar 52 Complete, well-documented, and agent-ready
TelnyxManaged Accounts1 API95.4TwilioAccountsSCIM2 APIs93.2AhaSendSubaccounts1 API91.0AnthropicWorkspace MembersWorkspaces2 APIs89.0SendGridAccountAccount StateSubusers3 APIs87.5ConfluentScim Tokens (org/v2)Signup (partner/v2)Users (scim/v2)3 APIs86.9DynatraceEnvironment Management1 API86.6WSO2OrganizationsTenant ConfigTenant Theme3 APIs84.4BrevomasterAccount1 API82.4GainsightSCIM1 API82.4CloudflareSCIM GroupsSSO2 APIs82.1GitHubIdentitiesProvisionProvisionedProvisioning4 APIs81.8SentrySCIM MembersSCIM Teams2 APIs80.6OktaBrandOrg2 APIs80.2Didomisso-connections1 API80.0OptimizelyDatabaseExports1 API79.6AmigoWorkspaces1 API78.8BugsnagSCIM1 API78.5Cockroach LabsSCIM1 API77.8LucidGroups1 API76.4ControlUpOrganizationsSAML2 APIs75.6ContentstackSCIM GroupsSCIM Users2 APIs75.2Cvent RegistrationUser SCIM1 API75.1CventUser SCIM1 API75.0SignalWireAccounts1 API74.8AxonFlowCommunity SaaS1 API73.7Qlik SenseBrandsTenant SettingsTenants3 APIs72.6RemoteSSO1 API72.6DocusignAccounts1 API72.5VendastaGroupUser2 APIs72.5Sigma Computingtenants1 API72.4ClerkDirectoriesSCIM DirectoriesSSO Bypass3 APIs72.2Auth0Tenantsself-service-profiles2 APIs72.1NetlifyaccountMembership1 API72.0PipesHubOrganizations1 API72.0CloudFrontcloudfront-distribution-tenant-api1 API71.8AuthentikTenants1 API71.6CumulocityOptionsTenants2 APIs71.4DaytonaOrganizations1 API71.1GitBookSSO1 API70.5TenableAccounts1 API69.2Cvent Event CloudUser SCIM1 API68.8MendSAML Integration - AccountSAML Integration - Organization2 APIs68.8HighLevelSub-Account (Formerly Location)1 API68.5Cisco XDRTenants1 API68.3Palo Alto NetworksMSSP Managed Tenant Lifecycle EndpointsTenantTenant APITenant Group Lifecycle Endpoints6 APIs68.2Live Direct MarketingAgencyBranding2 APIs67.7Oracleorganization1 API67.51PasswordSCIM1 API67.1PandiumTenants1 API66.9FireHydrantSCIM1 API66.5SignicatSCIM - User management1 API66.5
Strong 83 Solid coverage with minor gaps
LaserDataTenants1 API66.2HootsuiteSCIM 2.01 API65.9RoutebaseSCIM1 API65.9Spectro Cloudtenants1 API65.9LyticsAccount1 API65.8InstantlyWorkspace1 API65.6OpenworkAuthOrganizationsSCIMSSO4 APIs65.6GraphiantEnterprises1 API65.2Benchmark EmailSub Account1 API65.1BoxStandard and Zones Storage Policy Assignments1 API65.0VisierConsolidatedAnalyticsTenantsV1TenantsV23 APIs65.0RingoverSCIM1 API64.8Cvent Hospitality CloudUser SCIM1 API64.6Logz.ioManage time-based log accounts1 API64.5ValimailAccountsSCIMSSO3 APIs64.5Hugging Face TransformersSCIM1 API64.3MOLOCOWorkplace1 API64.1AiriaBrandingSCIM2 APIs64.0Cisco Catalyst SD-WANMultitenant APIs - ProviderTenant Backup RestoreTenant ManagementTenant Migration4 APIs63.8PixieBrixorganizations1 API63.8Koyeborganization1 API63.6AmplitudeGroupsUsers2 APIs63.5Go1Portals1 API63.5Firma.devWorkspaces1 API63.3HookdeckTenants1 API63.2Cisco UmbrellaProviders1 API62.7FenergoDomainGlobal Settings2 APIs62.7Wherobotsorganization1 API62.7LightrunIdentity Management (IdM) configuration1 API62.5VoPayBranding Endpoints1 API62.3CertifyosTenant Configuration1 API62.2Numbers OnlineMSP1 API62.0StytchB2B SCIMSSO2 APIs62.0VyondSCIM1 API62.0KentikTenantService1 API61.9NotarizeSCIM1 API61.9ReputationTenants1 API61.9MistMSPs Orgs1 API61.8ParticleTeam1 API61.6MoogsoftSSO1 API61.5WorkOSConnectionsDirectoriesdirectory-groupsdirectory-users6 APIs61.4ThingsBoardtenant-controllertenant-profile-controller2 APIs61.3PropelAuthOrganizations1 API61.2ArthurAITenant Signup1 API60.3Integration.app (Membrane)OrgWorkspaces1 API60.3Smart PensionCompanyBranding1 API60.3Commerce Layerorganizations1 API59.9KnockTenants1 API59.7SynthflowSubaccounts1 API59.7CharthopSAML1 API59.6TykOrganisations1 API59.6Galileo TechnologiesOrganizations1 API59.5FusioTenant1 API59.4Tandoor RecipesEnterprise Space1 API59.4Transmit SecurityOrganizations1 API59.3LaterInstanceDeactivationInstanceReactivationInstances3 APIs59.2Qwiet AiSAML1 API59.0Seqera LabsOrgs1 API58.9FronteggAccount HierarchyAccount MigrationAccountsOIDC Configurations Details15 APIs58.8Juniper NetworksMSPs Orgs1 API58.7RiotSCIM1 API58.7BluejaySCIM1 API58.6DealHubTenant1 API58.5AppDirectTenant Marketplace Provisioning1 API58.1ClarifeyeUser Provisioning1 API58.1Super.aiSSO1 API58.1ChromaTenant1 API57.9HatchetTenant1 API57.9Altimate AICompanySSO Group MappingsSUPERTOKENS3 APIs57.6FOLIOTenantTenant SettingsTenantsproxy-tenant6 APIs57.6ActivTrakAdministration - SCIM1 API57.2Tackle.ioUsers1 API57.1Cisco Secure FirewallProvision1 API57.0YoodliMulti Org Management1 API56.7APIClaw✨ SCIM v2 (Enterprise Only)1 API56.1NileAuthenticationTenants2 APIs56.1PrefectAccount SSO1 API55.4Impossible CloudPartners1 API55.2MavenlinkCustom Branding1 API55.2AirMDROrganization1 API55.1AxwayDomainIDP2 APIs54.6Gloatauth-settings1 API54.5ParchaAdmin1 API54.5
Developing 65 Usable, with meaningful gaps to close
Smol MachinesTenants1 API54.2NfonTenants1 API54.1QuadrillionOrgadmin2 APIs54.1PydanticAIOrganizationsSCIM2 APIs54.0Rill DataOrgs1 API54.0Depictmerchant-create1 API53.7DruvaTenants1 API53.7FusionAuthTenant1 API53.7SkeduloInternalStandalonetenant-controller3 APIs53.3CoreStackTenants1 API53.1RiveryAccounts1 API53.1TrustArcAccountsGroups2 APIs53.1IronCore LabsTenant1 API52.9AvayaAccount1 API52.5CoveoOrganizationsSaml Identity Providers2 APIs52.0LendAPISub TenantSub Tenants2 APIs51.9LaurelCustomersTenants2 APIs51.7SuprSendTenant1 API51.7Superb AITenants1 API51.6Eagle Eye NetworksSSO1 API51.5OryProjects1 API51.2Alokai (formerly Vue Storefront)instance/{namespace}v2.2/admin/instancev2.2/instance3 APIs50.8Arcee AIOrganizations1 API50.2CorityScimIdentity1 API50.1CommsHarborOrganizations1 API49.9American Express Global Business TravelSCIM User Sync V1SCIM User Sync V2SCIM User Sync V33 APIs49.8HacwareCustomer1 API49.8WorkSpanUsers1 API49.8LightdashSCIM1 API49.5ReqArchitectSAML1 API49.5vitagroupMulti tenant1 API49.5PopsinkOrganizations1 API49.1Docupilotorganizationsamlscim3 APIs47.9WekaTenant1 API47.8TagoIOBackup1 API47.1AivenAuthentication_Methods1 API46.8Trueworksubpackage_tenantProperties1 API46.7AMCS GroupTenantRegistration1 API46.5HumaPlugins1 API46.5SecureAuth (incl. Cloudentity)TenantConfigurationTenants2 APIs46.3MacrometaAdministration1 API45.9Select StarSCIM1 API45.9Viriditenant-controllertenant-profile-controller2 APIs45.9Juniper Mist AIMSPs Orgs1 API45.8Flume HealthAccounts1 API45.1ChatwootAccountsPlatform Accounts2 APIs44.8Docker HubSCIM1 API44.8VultrSCIM Groups1 API44.7NewstoreTenant Config1 API44.4Reclaim.aiScim1 API44.4LangChaintenant1 API44.2KeboolaProjects1 API44.1NVIDIA Run:aiTenant1 API43.6CogniteOrganizationsProjects2 APIs43.5CoorpacademyBrandsSCIM FINDSCIM UPDATEScim CREATE5 APIs43.4CubistOrgs1 API43.3ZadaraAccounts1 API43.3Aha.ioIdentity Providers1 API42.4ActivitiAdmin Tenants1 API42.3Dome9MSP1 API42.1Resistant AITenants1 API41.8Label Studiosubpackage_sso.subpackage_sso/samlsubpackage_sso.subpackage_sso/scim2 APIs41.6StellarAdmin1 API41.4Sarj AI Developer APIOrganizations1 API41.2VSCOStudio1 API40.4
Thin 24 Limited public surface area
Sublime SecurityOrganizationsSCIM2 APIs39.1CrescendoProvisioning1 API38.8BlaxelWorkspaces1 API38.7TetraScienceTenants1 API38.5SparkPostSubaccounts1 API37.9Gitpodgitpod.v1.OrganizationService1 API37.8Google Cloud Talent SolutionTenants1 API37.3LucidchartGroupsUsers2 APIs37.2Unissonorganizations1 API37.1LangSmithorgstenantworkspaces3 APIs36.9SuperTokensMulti Tenancy1 API36.4HotglueTenant1 API36.2Stellar CyberTenants1 API36.2NetBirdAccountsMSP2 APIs35.8MablAccountCompanyOrganizationSaml4 APIs35.4LangfuseSCIM1 API34.8CourierTenants1 API33.4GrowthBookOrganizations1 API32.7ImpervaAccount Management1 API31.5CortexSCIM1 API31.2ScalekitConnectionsDirectoriesOrganizations3 APIs31.2ArmadaTenants1 API31.0Haystack / deepsetsso_connections1 API30.7TurnkeyOrganizations1 API27.9
Emerging 1 Early or largely undocumented
ARMOTenants1 API25.1
Minimal 1 Almost no public developer surface
Flowdock (Discontinued)SCIM1 API0.0

Workflows that realise this capability

Arazzo workflows whose own sourceDescriptions call APIs that carry this capability. The link is derived, not asserted: each workflow declares x-realizes-capability-ids with the spec and confidence behind it.

This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature. This page shows which providers and tags reach SaaS Tenant Management. The underlying tag → capability edges — each with the quoted fragment of the provider's own OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate it passed — are available through the API, along with company-level capability maps. Only edges at confidence ≥ 0.7 with evidence found verbatim in the source contract are published at all.

See plans →  ·  How the edges are graded →