SaaS Tenant Management › Tenant Identity Federation

Tenant Identity Federation

BC-4230.50 Level 2 Software & Technology 84 providers 122 API surfaces 56 rated strong or better

Federation of tenant identity providers and lifecycle of tenant user accounts via single sign-on and SCIM.

Tenant Identity Federation (BC-4230.50) is a level-2 business capability under SaaS Tenant Management in the Software & Technology model. The catalog holds 122 API surface(s) from 84 provider(s) that can perform some part of it, 56 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.

Where this capability definition comes from. This capability is part of a published business-architecture model that API Evangelist did not author. It is redistributed here under CC-BY-4.0. Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented. Source repository · NOTICE and third-party framework attributions

Sub-capabilities

Tenant SSO Configuration BC-4230.50.10

Configuration of single sign-on between tenant identity providers and the service.

no catalog coverage

SCIM-Based User Provisioning BC-4230.50.20

Lifecycle of tenant user accounts driven by SCIM or equivalent provisioning protocols.

no catalog coverage

Tenant Identity Provider Onboarding BC-4230.50.30

Onboarding and validation of tenant identity providers.

no catalog coverage

Providers that reach this capability

Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.

Exemplar 25 Complete, well-documented, and agent-ready

TwilioSCIM1 API93.2 AnthropicWorkspace Members1 API89.0 ConfluentScim Tokens (org/v2)Users (scim/v2)2 APIs86.9 GainsightSCIM1 API82.4 CloudflareSCIM GroupsSSO2 APIs82.1 GitHubIdentitiesProvisionProvisionedProvisioning4 APIs81.8 SentrySCIM MembersSCIM Teams2 APIs80.6 Didomisso-connections1 API80.0 BugsnagSCIM1 API78.5 Cockroach LabsSCIM1 API77.8 LucidGroups1 API76.4 ControlUpSAML1 API75.6 ContentstackSCIM GroupsSCIM Users2 APIs75.2 Cvent RegistrationUser SCIM1 API75.1 CventUser SCIM1 API75.0 RemoteSSO1 API72.6 VendastaGroupUser2 APIs72.5 ClerkDirectoriesSCIM DirectoriesSSO Bypass3 APIs72.2 Auth0self-service-profiles1 API72.1 GitBookSSO1 API70.5 Cvent Event CloudUser SCIM1 API68.8 MendSAML Integration - AccountSAML Integration - Organization2 APIs68.8 1PasswordSCIM1 API67.1 FireHydrantSCIM1 API66.5 SignicatSCIM - User management1 API66.5

Strong 31 Solid coverage with minor gaps

HootsuiteSCIM 2.01 API65.9 RoutebaseSCIM1 API65.9 OpenworkAuthSCIMSSO3 APIs65.6 RingoverSCIM1 API64.8 Cvent Hospitality CloudUser SCIM1 API64.6 ValimailSCIMSSO2 APIs64.5 Hugging Face TransformersSCIM1 API64.3 AiriaSCIM1 API64.0 AmplitudeGroupsUsers2 APIs63.5 LightrunIdentity Management (IdM) configuration1 API62.5 StytchB2B SCIMSSO2 APIs62.0 VyondSCIM1 API62.0 NotarizeSCIM1 API61.9 ParticleTeam1 API61.6 MoogsoftSSO1 API61.5 WorkOSConnectionsDirectoriesdirectory-groupsdirectory-users5 APIs61.4 CharthopSAML1 API59.6 Qwiet AiSAML1 API59.0 FronteggOIDC Configurations DetailsSAML ConfigurationsSAML Configurations DetailsSCIM Configurations8 APIs58.8 RiotSCIM1 API58.7 BluejaySCIM1 API58.6 ClarifeyeUser Provisioning1 API58.1 Super.aiSSO1 API58.1 Altimate AISSO Group MappingsSUPERTOKENS2 APIs57.6 ActivTrakAdministration - SCIM1 API57.2 Tackle.ioUsers1 API57.1 APIClaw✨ SCIM v2 (Enterprise Only)1 API56.1 NileAuthentication1 API56.1 PrefectAccount SSO1 API55.4 AxwayDomainIDP2 APIs54.6 Gloatauth-settings1 API54.5

Developing 20 Usable, with meaningful gaps to close

QuadrillionOrg1 API54.1 PydanticAISCIM1 API54.0 RiveryAccounts1 API53.1 TrustArcGroups1 API53.1 CoveoSaml Identity Providers1 API52.0 Eagle Eye NetworksSSO1 API51.5 CorityScimIdentity1 API50.1 American Express Global Business TravelSCIM User Sync V1SCIM User Sync V2SCIM User Sync V33 APIs49.8 WorkSpanUsers1 API49.8 LightdashSCIM1 API49.5 ReqArchitectSAML1 API49.5 Docupilotsamlscim2 APIs47.9 AivenAuthentication_Methods1 API46.8 Select StarSCIM1 API45.9 Docker HubSCIM1 API44.8 VultrSCIM Groups1 API44.7 Reclaim.aiScim1 API44.4 CoorpacademySCIM FINDSCIM UPDATEScim CREATEScim LIST4 APIs43.4 Aha.ioIdentity Providers1 API42.4 Label Studiosubpackage_sso.subpackage_sso/samlsubpackage_sso.subpackage_sso/scim2 APIs41.6

Thin 7 Limited public surface area

Sublime SecuritySCIM1 API39.1 LucidchartGroupsUsers2 APIs37.2 MablSaml1 API35.4 LangfuseSCIM1 API34.8 CortexSCIM1 API31.2 ScalekitConnectionsDirectories2 APIs31.2 Haystack / deepsetsso_connections1 API30.7

Minimal 1 Almost no public developer surface

Flowdock (Discontinued)SCIM1 API0.0

This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.

The edge table is a Pro feature. This page shows which providers and tags reach Tenant Identity Federation. The underlying tag → capability edges — each with the quoted fragment of the provider's own OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate it passed — are available through the API, along with company-level capability maps. Only edges at confidence ≥ 0.7 with evidence found verbatim in the source contract are published at all.

See plans → · How the edges are graded →