Home / Glossary

active

SCIM for AI agents · Glossary

active is a required boolean on the Agent resource. Setting it to false tells the service to treat the agent as inactive.

What the draft says

The attribute indicates the agent identity's administrative status. A SCIM client can ask for the identity to be treated as inactive by setting it to false. The draft adds that "the definitive meaning of this attribute is determined by the SCIM service". So false may mean suspended in one service and blocked in another.

Same idea as the user flag

RFC 7643 uses the same wording for users: true typically means the user can log in, false typically means the account is suspended, and the service provider decides. We cover how Okta and Entra use it in SCIM vs SAML vs OIDC.

When the governance extension is present

The Oracle governance draft turns active into a projection of lifecycleState.state. It must be true when the state is active, and false for established, suspended, quarantined and archived. A request that sets both and gets them inconsistent is rejected with HTTP 400 and the SCIM error type invalidValue. Setting active to false on an active agent should be treated as a move to suspended.

Earlier drafts

In the Wahl draft, an absent active meant the identity was assumed active, and client support was optional. In the joint draft it is required.

Practical note

A false value does not by itself revoke tokens or keys that were already issued. The base draft does not say it should. The governance draft says outstanding tokens should be revoked or suspended when an agent is suspended. See SCIM vs OAuth for AI agents.

Example

An illustration using the PatchOp format from RFC 7644. It is not taken from the draft.

Source: draft-wzdk-scim-agent-resource-00 (datatracker). Drafts change. Read on 18 October 2026. Independent site, not affiliated with the IETF.

Related terms