draft-abbey-scim-agent-extension-00
The widest of the early proposals. It defined both an Agent and an AgenticApplication resource, with many more attributes than the joint draft that followed.
| Full title | SCIM Agents and Agentic Applications Extension |
|---|---|
| Authors | Macy Abbey and Rafael S. Cohen (Okta) |
| Revision and date | 00 (only revision), 16 October 2025 |
| Expired | 19 April 2026 |
| Intended status | Standards Track |
| Defines | Agent at /Agents and AgenticApplication at /AgenticApplications |
| Datatracker | datatracker.ietf.org |
| Full text | draft-abbey-scim-agent-extension-00.txt |
What it proposed
The abstract describes a SCIM 2.0 extension for agents and agentic applications. It includes extensions to the core User and Group objects, plus new resource types and schemas. The stated aim is better interoperability between identity providers, agentic applications, agents and their clients, while reducing what the growing list of new agent protocols has to take on.
The Agent resource in this draft
In this draft the only required Agent attribute is name. The others are optional:
| Attribute | Meaning in the draft |
|---|---|
displayName, description, active | Name for display, description, administrative status. |
agentType | Type of agent. No canonical values. Service providers may define their own. |
entitlements, roles, groups | Same form as the matching User attributes in RFC 7643. Groups are read-only. |
applications | Applications the agent shares a trust boundary with. |
subject | Lets a service match the agent to the sub claim in an inbound token from an OpenID Connect provider. |
x509Certificates | Certificates associated with the agent. |
protocols | Protocols the agent supports. Canonical types are A2A, OpenAPI and MCP-Server, each with a specification URL. |
parent | The parent agent, if the service supports hierarchies. |
owners | User or Group objects that own the agent. |
The AgenticApplication resource
The draft defines an agentic application as a software application that hosts or provides access to one or more agents. It serves as a container and runtime environment for them, managing authentication, authorization and access to resources.
Other parts
The draft also adds to ServiceProviderConfig, so a server can advertise support, and it describes filtering for both new resource types. WorkOS described these parts in its October 2025 write-up.
Status
The only revision is 00. The datatracker lists it as an expired individual Internet-Draft. The intended status in the document header is Standards Track, where the later joint draft says Informational. The datatracker page does not say whether another document replaced it. Compare it with the joint draft on the tracker.
Facts on this page come from the text of the draft and its datatracker page, read on 18 October 2026. Drafts change, so check the datatracker for the current state. This site is independent and not affiliated with the IETF.
Own the name for this category.
agentscim.com is for sale. If you build identity, security or agent tooling, write to me. Serious offers get a reply within 24 hours.
Make an offer