Summary and recommendation
Airfocus supports SCIM provisioning, but only on Enterprise plans with custom pricing. While it handles basic user lifecycle management (create, update, deactivate), it lacks group provisioning entirely—meaning team assignments and workspace access must be managed manually. The Azure Entra integration also suffers from significant delays (~40 minutes for provisioning), creating gaps where users can't access product roadmaps they need immediately.
For product management teams, this creates operational friction. Product managers, executives, and engineering leads need timely access to strategic roadmaps, but manual group assignments slow onboarding and complicate offboarding. Without automated group provisioning, IT teams must coordinate with product leads to ensure the right stakeholders have appropriate workspace access—exactly the kind of manual work SCIM should eliminate.
The strategic alternative
Stitchflow provides managed provisioning automation for Airfocus without requiring Enterprise upgrades. Full user and group lifecycle management with any plan, any IdP. Flat pricing under $5K/year.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Airfocus accounts manually. Here's what that costs:
The Airfocus pricing problem
Airfocus gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Essential | $15/user/month | ||
| Advanced | $49/user/month | ||
| Pro | $89/user/month | ||
| Enterprise | Custom pricing (contact sales) |
Plan Structure
| Plan | Price | SCIM |
|---|---|---|
| Essential | $15/user/month | ❌ |
| Advanced | $49/user/month | ❌ |
| Pro | $89/user/month | ❌ |
| Enterprise | Custom pricing (contact sales) | ✓ |
Note: Enterprise includes SAML SSO, workflows, governance features, advanced security, and dedicated support - but SCIM users can only provision individual users, not groups.
What this means in practice
Without transparent Enterprise pricing, teams face an unknown cost premium just to automate user provisioning. Based on typical SaaS pricing patterns, Enterprise tiers often represent a 2-3x markup over the highest published tier.
Conservative estimate for Enterprise upgrade costs:
The lack of published Enterprise pricing means IT teams must engage sales cycles just to understand provisioning costs.
Additional constraints
Summary of challenges
- Airfocus supports SCIM but only at Enterprise tier (Custom pricing (contact sales) - includes workflows, governance, advanced security, dedicated support)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Airfocus doesn't sell SCIM à la carte. It's bundled with Enterprise features requiring custom pricing:
Stitchflow Insight
The SCIM implementation has notable limitations: no group provisioning support, Azure Entra delays of ~40 minutes, and SCIM users must use SSO (no password sync). If you need enterprise governance features anyway, the upgrade may justify the cost. If you just want automated user provisioning, you're paying for enterprise features you likely won't use. We estimate ~80% of Enterprise features are irrelevant for teams that only need basic SCIM provisioning.
What IT admins are saying
Community sentiment on Airfocus's SCIM limitations centers on missing features and Enterprise-only pricing. Common complaints:
- No group provisioning support - manual team assignments required
- Forced into custom Enterprise pricing just for basic SCIM functionality
- Azure Entra provisioning delays of ~40 minutes
- SCIM users locked into SSO - no password sync fallback
The recurring theme
Airfocus delivers half-baked SCIM (users only, no groups) behind an expensive Enterprise paywall, forcing IT teams to manage product roadmap access manually despite paying premium prices.
The decision
| Your Situation | Recommendation |
|---|---|
| On Essential/Advanced/Pro, need SCIM | Use Stitchflow: avoid the Enterprise tier jump and custom pricing |
| Already on Enterprise with SCIM | Use native SCIM: you're paying for it, despite the group limitations |
| Need robust group-based provisioning | Use Stitchflow: airfocus doesn't support SCIM groups at all |
| Using Azure Entra ID | Use Stitchflow: skip the 40-minute provisioning delays |
| Small product team, minimal user changes | Manual may work: but watch for roadmap access gaps |
The bottom line
airfocus locks SCIM behind Enterprise's custom pricing tier and doesn't support group provisioning—a critical gap for product teams managing stakeholder access across different product areas. For teams that need reliable user provisioning without the Enterprise commitment or group limitations, Stitchflow delivers complete automation at predictable flat-rate pricing.
Automate Airfocus without the tier upgrade
Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Airfocus at <$5K/year, flat, regardless of team size.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- SCIM Groups NOT supported - Users only
- No password sync - users must use SSO/SAML
- Azure Entra provisioning delay (~40 minutes)
- Okta: edit username field not email for updates
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
SAML SSO + SCIM. Users only (no groups). SCIM users must use SSO to access. Edit username field (not email) for updates. SSO can be enforced.
Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Azure Entra provisioning delay ~40 minutes. No password sync - SCIM users must use SSO/SAML. Users only (no group provisioning).
Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.
Unlock SCIM for
Airfocus
Airfocus gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee.
See how it works