Stitchflow
Airfocus logo

Airfocus SCIM guide

Native SCIM

How to automate Airfocus user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Airfocus supports SCIM provisioning, but only on Enterprise plans with custom pricing. While it handles basic user lifecycle management (create, update, deactivate), it lacks group provisioning entirely—meaning team assignments and workspace access must be managed manually. The Azure Entra integration also suffers from significant delays (~40 minutes for provisioning), creating gaps where users can't access product roadmaps they need immediately.

For product management teams, this creates operational friction. Product managers, executives, and engineering leads need timely access to strategic roadmaps, but manual group assignments slow onboarding and complicate offboarding. Without automated group provisioning, IT teams must coordinate with product leads to ensure the right stakeholders have appropriate workspace access—exactly the kind of manual work SCIM should eliminate.

The strategic alternative

Airfocus gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Airfocus accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Airfocus pricing problem

Airfocus gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Essential$15/user/month
Advanced$49/user/month
Pro$89/user/month
EnterpriseCustom pricing (contact sales)

Plan Structure

PlanPriceSCIM
Essential$15/user/month
Advanced$49/user/month
Pro$89/user/month
EnterpriseCustom pricing (contact sales)

Note: Enterprise includes SAML SSO, workflows, governance features, advanced security, and dedicated support - but SCIM users can only provision individual users, not groups.

What this means in practice

Without transparent Enterprise pricing, teams face an unknown cost premium just to automate user provisioning. Based on typical SaaS pricing patterns, Enterprise tiers often represent a 2-3x markup over the highest published tier.

Conservative estimate for Enterprise upgrade costs:

50 product team members
Potentially $50K-100K+ annually vs. $53,400 on Pro tier
100 product team members
Potentially $100K-200K+ annually vs. $106,800 on Pro tier

The lack of published Enterprise pricing means IT teams must engage sales cycles just to understand provisioning costs.

Additional constraints

No group provisioning
Teams must manually assign product managers to specific workspaces and projects despite having SCIM enabled.
Azure Entra delay
Microsoft integrations experience ~40-minute provisioning delays, creating friction for time-sensitive product launches.
SSO dependency
SCIM-provisioned users must authenticate via SSO; no fallback authentication methods available.
Sales-gated pricing
No self-service path to SCIM - requires enterprise sales engagement regardless of team size.

Summary of challenges

  • Airfocus supports SCIM but only at Enterprise tier (Custom pricing (contact sales) - includes workflows, governance, advanced security, dedicated support)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Airfocus doesn't sell SCIM à la carte. It's bundled with Enterprise features requiring custom pricing:

SCIM automated provisioning (users only - no group support)
SAML single sign-on (SSO)
Advanced workflows and automation
Governance and approval processes
Advanced security controls
Dedicated customer support
Priority feature access

Stitchflow Insight

The SCIM implementation has notable limitations: no group provisioning support, Azure Entra delays of ~40 minutes, and SCIM users must use SSO (no password sync). If you need enterprise governance features anyway, the upgrade may justify the cost. If you just want automated user provisioning, you're paying for enterprise features you likely won't use. We estimate ~80% of Enterprise features are irrelevant for teams that only need basic SCIM provisioning.

What IT admins are saying

Community sentiment on Airfocus's SCIM limitations centers on missing features and Enterprise-only pricing. Common complaints:

  • No group provisioning support - manual team assignments required
  • Forced into custom Enterprise pricing just for basic SCIM functionality
  • Azure Entra provisioning delays of ~40 minutes
  • SCIM users locked into SSO - no password sync fallback

The recurring theme

Airfocus delivers half-baked SCIM (users only, no groups) behind an expensive Enterprise paywall, forcing IT teams to manage product roadmap access manually despite paying premium prices.

The decision

Your SituationRecommendation
On Essential/Advanced/Pro, need SCIMUse Stitchflow: avoid the Enterprise tier jump and custom pricing
Already on Enterprise with SCIMUse native SCIM: you're paying for it, despite the group limitations
Need robust group-based provisioningUse Stitchflow: airfocus doesn't support SCIM groups at all
Using Azure Entra IDUse Stitchflow: skip the 40-minute provisioning delays
Small product team, minimal user changesManual may work: but watch for roadmap access gaps

The bottom line

airfocus locks SCIM behind Enterprise's custom pricing tier and doesn't support group provisioning—a critical gap for product teams managing stakeholder access across different product areas. For teams that need reliable user provisioning without the Enterprise commitment or group limitations, Stitchflow delivers complete automation at predictable flat-rate pricing.

Make Airfocus workflows AI-native

Airfocus gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SCIM Groups NOT supported - Users only
  • No password sync - users must use SSO/SAML
  • Azure Entra provisioning delay (~40 minutes)
  • Okta: edit username field not email for updates

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Airfocus → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

SAML SSO + SCIM. Users only (no groups). SCIM users must use SSO to access. Edit username field (not email) for updates. SSO can be enforced.

Airfocus gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Airfocus → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Azure Entra provisioning delay ~40 minutes. No password sync - SCIM users must use SSO/SAML. Users only (no group provisioning).

Airfocus gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Airfocus

Airfocus gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Airfocus logo
Airfocus
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Aha! logo

Aha!

No SCIM

Product Management / Roadmapping

ProvisioningNot Supported
Manual Cost$11,754/yr

Aha! Roadmaps, the product roadmapping platform, does not support SCIM provisioning on any plan. While Aha! offers SAML 2.0 SSO integration with identity providers like Okta, Entra ID, and OneLogin, this only handles authentication through JIT (Just-In-Time) provisioning. The critical limitation: JIT provisioning creates user accounts with no default role or access permissions, requiring administrators to manually configure access for each user after they first sign in. For product teams managing strategic roadmaps and stakeholder access, this creates significant operational overhead. Since product roadmaps contain sensitive strategic information and stakeholder access typically varies by product area, IT administrators must manually assign appropriate roles and workspace permissions after each user is provisioned. There's no automatic deprovisioning when users leave the organization, creating potential security gaps. This manual process becomes particularly problematic for larger product organizations where dozens of stakeholders across different business units need carefully managed access to specific roadmaps.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide