SaaS Tenant Management

BC-4230 Level 1 Software & Technology 130 providers 180 API surfaces 72 rated strong or better

Provisioning, configuration, isolation, region placement, identity federation, and per-tenant data export of tenants in the multi-tenant service.

SaaS Tenant Management (BC-4230) is a level-1 business capability in the Software & Technology model. The catalog holds 180 API surface(s) from 130 provider(s) that can perform some part of it, 72 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.

Where this capability definition comes from. This capability is part of a published business-architecture model that API Evangelist did not author. It is redistributed here under CC-BY-4.0. Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented. Source repository · NOTICE and third-party framework attributions

Authorities this capability cites

Cited by the capability model itself. These frameworks are referenced, never redistributed, and citing one does not imply its owner endorses this listing.

Sub-capabilities

Tenant Provisioning & Lifecycle BC-4230.10

Creation, suspension, decommissioning, and migration of tenants in the multi-tenant fleet.

88 providers, 107 API surfaces

Tenant Configuration Management BC-4230.20

Per-tenant feature configuration, branding, and limits applied above the shared product baseline.

10 providers, 10 API surfaces

Tenant Isolation Management BC-4230.30

Mechanisms that maintain logical and physical isolation between tenants across data, compute, and access paths.

no catalog coverage

Data Residency & Region Placement BC-4230.40

Assignment of tenants to regions, enforcement of data-residency commitments, and management of cross-region replication policy.

no catalog coverage

Tenant Identity Federation BC-4230.50

Federation of tenant identity providers and lifecycle of tenant user accounts via single sign-on and SCIM.

36 providers, 51 API surfaces

Tenant Backup & Export Management BC-4230.60

Per-tenant data export, deletion, and restore capabilities exposed to tenants and administrators.

1 provider, 1 API surface

Providers that reach this capability

Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.

Exemplar 27 Complete, well-documented, and agent-ready
TwilioAccounts1 API89.3AhaSendSubaccounts1 API84.3WSO2Tenant Config1 API83.1SendGridAccountSubusers2 APIs82.9TelnyxManaged Accounts1 API82.3BrevomasterAccount1 API81.7Didomisso-connections1 API81.5AnthropicWorkspace MembersWorkspaces2 APIs80.6SentrySCIM Members1 API80.5CventUser SCIM1 API78.6BugsnagSCIM1 API78.4Cvent RegistrationUser SCIM1 API77.4ControlUpOrganizations1 API75.6ContentstackSCIM GroupsSCIM Users2 APIs75.1Palo Alto NetworksMSSP Managed Tenant Lifecycle EndpointsTenantTenant APITenant Group Lifecycle Endpoints6 APIs73.4Cvent Event CloudUser SCIM1 API72.4NetlifyaccountMembership1 API72.4Sigma Computingtenants1 API72.4Spectro Cloudtenants1 API72.0AuthentikTenants1 API71.6VendastaGroup1 API70.8DocusignAccounts1 API70.3DaytonaOrganizations1 API69.2Live Direct MarketingAgencyBranding2 APIs68.6LucidGroups1 API68.4Oracleorganization1 API68.4CumulocityTenant OptionsTenants2 APIs67.5
Strong 45 Solid coverage with minor gaps
FireHydrantSCIM1 API66.4HighLevelSub-Account (Formerly Location)1 API66.4Cisco XDRTenants1 API66.1SignalWireAccounts1 API65.9Commerce Layerorganizations1 API65.6FronteggAccount MigrationAccountsSAML ConfigurationsSCIM Configurations9 APIs65.5VisierConsolidatedAnalyticsTenantsV1TenantsV23 APIs65.0AmigoWorkspaces1 API64.8PandiumTenants1 API64.7RoutebaseSCIM1 API64.3ValimailSCIMSSO2 APIs64.2Cisco Catalyst SD-WANMultitenant APIs - ProviderTenant Backup RestoreTenant ManagementTenant Migration4 APIs63.7Go1Portals1 API63.5Koyeborganization1 API63.5OpenworkAuthSCIMSSO3 APIs63.4PropelAuthOrganizations1 API63.2Firma.devWorkspaces1 API62.5ParticleTeam1 API62.2PixieBrixorganizations1 API62.2ReputationTenants1 API61.8Integration.app (Membrane)OrgWorkspaces1 API61.6ThingsBoardtenant-controllertenant-profile-controller2 APIs61.2Wherobotsorganization1 API61.0VyondSCIM1 API60.7Numbers OnlineMSP1 API60.4GraphiantEnterprises1 API60.2Juniper NetworksMSPs Orgs1 API60.2Hugging Face TransformersSCIM1 API60.0SynthflowSubaccounts1 API60.0WorkOSorganization-domainsorganizations2 APIs60.0AxwayDomain1 API58.5AppDirectTenant Marketplace Provisioning1 API58.0LaserDataTenants1 API58.0Super.aiSSO1 API58.0Tandoor RecipesEnterprise Space1 API57.9AmplitudeGroupsUsers2 APIs57.8Seqera LabsOrgs1 API57.3CertifyosTenant Configuration1 API57.1Cisco Secure FirewallProvision1 API56.9Altimate AISUPERTOKENS1 API55.9FusioTenant1 API55.9HatchetTenant1 API55.4DruvaTenants1 API55.3AirMDROrganization1 API55.1PydanticAIOrganizationsSCIM2 APIs55.0
Developing 47 Usable, with meaningful gaps to close
DealHubTenant1 API54.2KentikTenantService1 API53.7TrustArcAccounts1 API53.5SkeduloInternaltenant-controller2 APIs53.2IronCore LabsTenant1 API52.6Quadrillionadmin1 API52.5FusionAuthTenant1 API52.3RiotSCIM1 API52.3LaterInstances1 API52.2CoveoOrganizations1 API52.1LaurelCustomersTenants2 APIs51.7MavrckInstances1 API51.6TetraScienceTenants1 API50.9WorkSpanUsers1 API49.8vitagroupMulti tenant1 API49.4CommsHarborOrganizations1 API48.6StellarAdmin1 API48.1LendAPISub TenantSub Tenants2 APIs47.7Docupilotorganizationsamlscim3 APIs47.6Impossible CloudPartners1 API47.2OryProjects1 API46.8Smol MachinesTenants1 API46.8Alokai (formerly Vue Storefront)instance/{namespace}v2.2/admin/instancev2.2/instance3 APIs46.5HumaPlugins1 API46.5ParchaAdmin1 API46.5NfonTenants1 API46.3Rill DataOrgs1 API46.0MacrometaAdministration1 API45.9Select StarSCIM1 API45.9AivenAuthentication_Methods1 API45.3Superb AITenants1 API45.2LangChaintenant1 API43.9SparkPostSubaccounts1 API43.9Gitpodgitpod.v1.OrganizationService1 API43.8Docker HubSCIM1 API43.6CoorpacademyBrandsSCIM FINDSCIM UPDATEScim CREATE5 APIs43.4CubistOrgs1 API43.2ChatwootAccountsPlatform Accounts2 APIs43.0Label Studiosubpackage_sso.subpackage_sso/samlsubpackage_sso.subpackage_sso/scim2 APIs43.0Reclaim.aiScim1 API42.9CogniteOrganizations1 API42.0Resistant AITenants1 API41.7SuperTokensMulti Tenancy1 API40.9Viriditenant-controllertenant-profile-controller2 APIs40.9Maia-analyticsworkspaces1 API40.5ImpervaAccount Management1 API39.7ScalekitConnectionsDirectoriesOrganizations3 APIs39.5
Thin 10 Limited public surface area
Sublime SecurityOrganizationsSCIM2 APIs39.0LangSmithorgstenantworkspaces3 APIs38.4Stellar CyberTenants1 API37.7Google Cloud Talent SolutionTenants1 API37.4NetBirdAccountsMSP2 APIs37.3Unissonorganizations1 API37.0CourierTenants1 API35.0TurnkeyOrganizations1 API34.9BlaxelWorkspaces1 API33.4ArmadaTenants1 API30.9
Minimal 1 Almost no public developer surface
Flowdock (Discontinued)SCIM1 API0.0

Workflows that realise this capability

Arazzo workflows whose own sourceDescriptions call APIs that carry this capability. The link is derived, not asserted: each workflow declares x-realizes-capability-ids with the spec and confidence behind it.

This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature. This page shows which providers and tags reach SaaS Tenant Management. The underlying tag → capability edges — each with the quoted fragment of the provider's own OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate it passed — are available through the API, along with company-level capability maps. Only edges at confidence ≥ 0.7 with evidence found verbatim in the source contract are published at all.

See plans →  ·  How the edges are graded →