“1. Workato Agent Studio – Particularly interesting for agent platforms. Workato Identity supports external IdP synchronization, centralized user and group management, SAML SSO, and JIT account provisioning.”
“Workato Identity supports external IdP synchronization, centralized user and group management, SAML SSO, and JIT account provisioning.”
“2. Hugging Face Enterprise Plus – A strong option if you want centralized user lifecycle management through SCIM and enterprise SSO. Check Managed SSO rather than Basic SSO.”
“A strong option if you want centralized user lifecycle management through SCIM and enterprise SSO.”
“Hugging Face supports SCIM on Enterprise plans.”
“Its Basic SSO model requires users to have an existing account and accept an invitation; Managed SSO offers more centralized lifecycle control.”
“3. ServiceNow AI Agent Studio – Worth evaluating if you already use ServiceNow. Its underlying platform supports SSO and automated provisioning/deprovisioning of users and groups through Microsoft Entra ID. This is platform-level support, not a separate guarantee for every agent deployment.”
“Its underlying platform supports SSO and automated provisioning/deprovisioning of users and groups through Microsoft Entra ID.”
“This is platform-level support, not a separate guarantee for every agent deployment.”
“Salesforce Agentforce | Yes | JIT; verify SCIM | SAML identity providers”
“Salesforce supports SAML SSO and Just-in-Time (JIT) user creation.”
“JIT should not be confused with full SCIM lifecycle provisioning.”
“Google Gemini Enterprise | Yes | Yes, SCIM | Entra ID, Okta, SAML/OIDC IdPs”
“Google Gemini Enterprise documents SCIM integration for Entra ID and Okta, including group-related functionality.”
“Microsoft Copilot Studio | Yes | Verify separately | Entra ID and generic OAuth providers”
“Copilot Studio supports SSO, but its documented agent identity provisioning concerns agent identities, not automatically provisioning human users into the platform.”
“Moveworks | Yes | Not established as native SCIM | Okta, Entra ID, OneLogin, Google”
“Moveworks | Yes | Not established as native SCIM | Okta, Entra ID, OneLogin, Google”