[apugoneappu]

From my limited knowledge of how SSO works, is this possible?

1. A company Acme wants to have SSO in the tools A, B and C that it uses.

2. Another company Balloon integrates with A, B, C to use the admin API for an admin account to modify or delete users in that account

3. Acme logs in to Balloon and connects its admin account of A, B, and C to these integrations.

4. Now Acme has access to employee's accounts in A, B, C through the Balloon's dashboard to modify or delete users etc.

[jon-wood]

Yes, it’s typically referred to as SCIM and is supported by most serious SSO services.

[rubenfiszel]

I was not aware of this and will look it up. I was of the naive opinion of the parent thread.