SaaS Tenant Management

BC-4230 Level 1 Software & Technology 72 providers 111 API surfaces 42 rated strong or better

Provisioning, configuration, isolation, region placement, identity federation, and per-tenant data export of tenants in the multi-tenant service.

SaaS Tenant Management (BC-4230) is a level-1 business capability in the Software & Technology model. The catalog holds 111 API surface(s) from 72 provider(s) that can perform some part of it, 42 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.

Where this capability definition comes from. This capability is part of a published business-architecture model that API Evangelist did not author. It is redistributed here under CC-BY-4.0. Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented. Source repository · NOTICE and third-party framework attributions

Authorities this capability cites

Cited by the capability model itself. These frameworks are referenced, never redistributed, and citing one does not imply its owner endorses this listing.

Sub-capabilities

Tenant Provisioning & Lifecycle BC-4230.10

Creation, suspension, decommissioning, and migration of tenants in the multi-tenant fleet.

48 providers, 65 API surfaces

Tenant Configuration Management BC-4230.20

Per-tenant feature configuration, branding, and limits applied above the shared product baseline.

9 providers, 9 API surfaces

Tenant Isolation Management BC-4230.30

Mechanisms that maintain logical and physical isolation between tenants across data, compute, and access paths.

no catalog coverage

Data Residency & Region Placement BC-4230.40

Assignment of tenants to regions, enforcement of data-residency commitments, and management of cross-region replication policy.

no catalog coverage

Tenant Identity Federation BC-4230.50

Federation of tenant identity providers and lifecycle of tenant user accounts via single sign-on and SCIM.

18 providers, 30 API surfaces

Tenant Backup & Export Management BC-4230.60

Per-tenant data export, deletion, and restore capabilities exposed to tenants and administrators.

1 provider, 1 API surface

Providers that reach this capability

Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.

Exemplar 21 Complete, well-documented, and agent-ready
BrevomasterAccount1 API87.3SendGridAccountSubusers2 APIs80.0TwilioAccounts1 API77.8SentrySCIM Members1 API77.4Didomisso-connections1 API77.3AnthropicWorkspace MembersWorkspaces2 APIs74.4ControlUpOrganizations1 API73.8ContentstackSCIM GroupsSCIM Users2 APIs73.6Palo Alto NetworksMSSP Managed Tenant Lifecycle EndpointsTenantTenant APITenant Group Lifecycle Endpoints5 APIs70.4Commerce Layerorganizations1 API69.9Cvent Event CloudUser SCIM1 API69.9Go1Portals1 API69.1AmigoWorkspaces1 API69.0DocusignAccounts1 API68.9SignalWireAccounts1 API68.9Sigma Computingtenants1 API68.8Cisco Catalyst SD-WANMultitenant APIs - ProviderTenant Backup RestoreTenant ManagementTenant Migration4 APIs68.4NetlifyaccountMembership1 API68.1WSO2Tenant Config1 API67.9FronteggAccount MigrationAccountsSAML ConfigurationsSCIM Configurations9 APIs67.3Oracleorganization1 API67.0
Strong 21 Solid coverage with minor gaps
VendastaGroup1 API66.1LucidGroups1 API65.6CumulocityTenant OptionsTenants2 APIs64.4Koyeborganization1 API64.3ParticleTeam1 API63.7ThingsBoardtenant-controllertenant-profile-controller2 APIs62.4Cisco XDRTenants1 API61.4PixieBrixorganizations1 API61.1Wherobotsorganization1 API60.4CertifyosTenant Configuration1 API59.6WorkOSorganization-domainsorganizations2 APIs59.6VisierConsolidatedAnalyticsTenantsV1TenantsV23 APIs59.4VyondSCIM1 API59.2GraphiantEnterprises1 API58.8Spectro Cloudtenants1 API57.9PhasioManufacturer Operator Controller1 API57.5Cisco Secure FirewallProvision1 API57.4OpenworkAuthSCIMSSO3 APIs56.4Altimate AISUPERTOKENS1 API55.1AppDirectTenant Marketplace Provisioning1 API54.9TetraScienceTenants1 API54.3
Developing 26 Usable, with meaningful gaps to close
SkeduloInternaltenant-controller2 APIs54.2MavrckInstances1 API52.8Quadrillionadmin1 API52.8DealHubTenant1 API52.6FusionAuthTenant1 API52.5TrustArcAccounts1 API51.6LaurelCustomersTenants2 APIs51.0CoveoOrganizations1 API50.5LendAPISub TenantSub Tenants2 APIs50.4LaterInstances1 API49.1Wispr AIEnterprise1 API48.1MacrometaAdministration1 API47.9Docupilotorganizationsamlscim3 APIs47.8HumaPlugins1 API47.8NfonTenants1 API46.7LangChaintenant1 API46.5TelnyxManaged Accounts1 API46.3ParchaAdmin1 API45.2CoorpacademyBrandsSCIM FINDSCIM UPDATEScim CREATE5 APIs45.0ChatwootAccountsPlatform Accounts2 APIs44.6AivenAuthentication_Methods1 API44.3Label Studiosubpackage_sso.subpackage_sso/samlsubpackage_sso.subpackage_sso/scim2 APIs43.2Reclaim.aiScim1 API40.8Maia-analyticsworkspaces1 API40.5LangSmithorgstenantworkspaces3 APIs40.1NetBirdAccountsMSP2 APIs39.5
Thin 4 Limited public surface area
CogniteOrganizations1 API38.1Unissonorganizations1 API37.4CourierTenants1 API35.4ArmadaTenants1 API31.8

Workflows that realise this capability

Arazzo workflows whose own sourceDescriptions call APIs that carry this capability. The link is derived, not asserted: each workflow declares x-realizes-capability-ids with the spec and confidence behind it.

This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature. This page shows which providers and tags reach SaaS Tenant Management. The underlying tag → capability edges — each with the quoted fragment of the provider's own OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate it passed — are available through the API, along with company-level capability maps. Only edges at confidence ≥ 0.7 with evidence found verbatim in the source contract are published at all.

See plans →  ·  How the edges are graded →