SCIM is how companies create and remove accounts for people across hundreds of apps. Now the industry is extending it to AI agents. agentscim.com is the name for that category.
System for Cross-domain Identity Management. An open standard from 2015 that lets one directory keep accounts in sync across every app a company uses.
An identity provider such as Okta or Microsoft Entra ID holds the list of who works at the company.
Changes travel as simple REST calls with JSON: create, read, update, delete. Any app can implement them.
New hire gets access everywhere. Role change updates everywhere. Departure removes access everywhere, at once.
POST /scim/v2/Agents
{
"schemas": ["urn:ietf:params:scim:schemas:core:2.0:Agent"],
"name": "Helpdesk bot",
"owner": "it-team@acme.com",
"active": true
}
Three agents work in four company apps. Press a button and watch one SCIM request remove the agent from every app at once.
Companies are deploying more agents every quarter. Each one holds keys to real systems. Here is what SCIM for agents makes possible.
Agents linked to an owner can be disabled the moment the owner's account is closed, instead of running for months unnoticed.
One list of agents across vendors, with an owner and a purpose for each. The basis for any audit.
If an agent misbehaves, security sets it inactive once and every connected app follows.
Register an agent once in the directory. The apps it needs receive its identity automatically.
Apps that host agents can expose them through a standard endpoint instead of a custom integration per customer.
Who created this agent, who owns it, is it still active. Questions SCIM records can answer.
Okta and Microsoft started with competing proposals. Today they write one draft together at the IETF.
Okta and Microsoft each propose how to represent an agent.
Okta slidesAuthors from Microsoft, Okta and Nextident publish one shared draft.
Read the draftThe extension enterprise buyers trust and type first.
Letters. Short, no hyphens, easy to say on a call.
Exact match for the category the IETF is defining.
The standard is still forming. The name is free today.
Plain-English guides, a tracker for every IETF draft on SCIM for agents, and a glossary of the fields. Each claim links to its source.
No. SAML and OpenID Connect decide who can log in. SCIM manages the account itself: create, change, disable. Most companies use both.
Not yet. It is an IETF Internet-Draft, so details can still change.
Email an offer. Transfer can go through an escrow service so both sides are protected.
No. This is an independent page that explains the topic and offers the domain.
Serious offers get a reply within 24 hours.