Amplitude SCIM guide

Mixpanel supports SCIM (the protocol that lets your identity provider automatically create, update, and remove user accounts). But Mixpanel gates SCIM behind its Enterprise plan, which starts at $10,000/year and can reach $200,000+ depending on event volume. For product analytics, this creates a significant barrier since teams often start with Growth plans ($20/month base) but need Enterprise-level security controls as they scale. This pricing structure forces growing companies into an uncomfortable choice: either manage Mixpanel users manually (creating compliance gaps for sensitive product data) or pay Enterprise prices before they're ready. SSO alone doesn't solve the provisioning problem - you still need to manually grant project-level permissions and manage role assignments for product managers, analysts, and engineers accessing user behavior data.

Bugsnag supports native SCIM provisioning, but only on Enterprise plans with custom pricing. This creates a significant cost barrier since you must upgrade from Business ($475/month for 1M events) to Enterprise just to unlock automated user provisioning. For many engineering teams, this represents a substantial price jump for provisioning features that should be standard across all paid plans. The Enterprise requirement is particularly problematic for mid-size development teams who need error monitoring automation but don't require Enterprise-level features. Without SCIM, IT teams must manually provision developer accounts and manage team memberships for project access—creating security gaps when developers change teams or leave the company. OneLogin users face an additional limitation: SCIM isn't supported on Enterprise instances, forcing a workaround through the standard Bugsnag app.

Greenhouse supports SCIM provisioning, but only on Advanced or Expert tiers (starting around $6,000/year, quote-based). The bigger issue: Greenhouse's SCIM implementation only provisions users—not groups—meaning you lose the organizational structure and permission inheritance that makes identity management scalable. Additionally, you cannot fully delete users via SCIM (only deactivate), and Azure Entra users face a 40-minute sync delay. For recruiting teams managing hiring managers, interviewers, and HR staff across different departments and access levels, the lack of group provisioning creates a significant operational burden. You're forced to manually assign permissions and manage access changes for every user individually. With recruiting involving sensitive candidate data and frequent access changes during hiring cycles, this manual overhead increases both security risk and administrative workload.