Stitchflow
Ashby logo

Ashby SCIM guide

Native SCIM

How to automate Ashby user provisioning, and what it actually costs

Native SCIM requires Growth/Enterprise plan

Summary and recommendation

Ashby supports SCIM 2.0 for automated user provisioning, but only on its Growth and Enterprise tiers. While Ashby's newer pricing structure starts at $400/month for Foundations (up to 100 employees), SCIM requires upgrading to Growth or Enterprise with custom pricing. For most organizations, this means annual contracts starting around $6K-$15K, plus additional costs for elevated seats ($800/year each) and dedicated recruiter licenses ($350-750/month).

This creates a significant access control gap for recruiting teams. Without automated provisioning, IT admins must manually manage access to sensitive candidate data and personally identifiable information (PII). Hiring managers who need temporary access to specific job openings often get over-provisioned permissions, while departing employees may retain access to confidential recruiting data longer than necessary.

The strategic alternative

Ashby gates SCIM behind Growth/Enterprise. Skip the Growth/Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OIDC
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Ashby accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Ashby pricing problem

Ashby gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Foundations$400/mo (up to 100 employees)
PlusCustom pricing
EnterpriseCustom pricing

Note: Ashby requires contact with sales for Plus and Enterprise pricing. SCIM is bundled with SSO - no password authentication is supported once SSO is enabled.

What this means in practice

Based on Ashby's pricing patterns ($5-8/employee/month scaling with typical annual contracts of $6K-$15K):

Team SizeFoundations CostEstimated Plus/EnterpriseAnnual Increase
25 recruiting users$4,800/year$6,000-12,000/year+$1,200-7,200/year
50 recruiting usersMust upgrade*$8,000-15,000/yearForced upgrade
100+ recruiting usersMust upgrade*$12,000-20,000+/yearForced upgrade

*Foundations caps at 100 employees company-wide, not just recruiting users

Additional constraints

Sales-gated pricing
Plus and Enterprise require custom quotes, extending procurement cycles.
All-or-nothing SSO
Once SSO is enabled, password authentication is disabled - no hybrid authentication model.
Recruiting-specific access patterns
Hiring managers need temporary access to specific job postings, requiring precise group management that manual provisioning can't efficiently handle.
Additional seat costs
Elevated seats cost $800/year each, and dedicated recruiter licenses run $350-750/month, compounding the total cost.

Summary of challenges

  • Ashby supports SCIM but only at Enterprise tier (custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Ashby doesn't sell SCIM separately. It's bundled with Growth/Enterprise features that most recruiting teams won't fully utilize:

SCIM automated provisioning
SAML/OIDC single sign-on (SSO)
Advanced reporting and analytics
Custom integrations and API access
Dedicated customer success manager
Enhanced security controls
Priority support

The Growth tier starts around $6K-15K annually for most teams, while Enterprise pricing requires sales contact. If you're upgrading solely for user provisioning, you're paying for recruitment analytics, custom integrations, and premium support that many ATS admins never use.

Stitchflow Insight

We estimate ~60% of Growth/Enterprise features are irrelevant for IT teams that just need automated user lifecycle management for their recruiting platform. You're essentially paying enterprise ATS prices to solve an identity management problem.

What IT admins are saying

Community sentiment on Ashby's SCIM requirements centers around tier restrictions and pricing transparency issues. Common complaints:

  • SSO and SCIM locked behind higher-priced Growth/Enterprise tiers
  • Enterprise pricing requires contacting sales with no public rates
  • No password authentication fallback creates vendor lock-in concerns
  • Pricing structure feels opaque compared to transparent competitors

"Enterprise features require higher tiers" and "Pricing not fully transparent" are consistent themes in admin feedback about Ashby's approach to identity management.

The recurring theme

Ashby gates essential security features behind enterprise sales processes, making it difficult for IT teams to budget and plan for proper user provisioning without lengthy sales cycles.

The decision

Your SituationRecommendation
On Foundations, need SCIMUse Stitchflow: avoid the custom pricing tier jump to Growth/Enterprise
Already on Growth/Enterprise with SCIMUse native SCIM: you're paying for it
Need Enterprise features beyond SCIMEvaluate Growth/Enterprise: SCIM comes bundled
Recruiting team with sensitive candidate dataUse Stitchflow: SOC 2 compliance without tier upgrade costs
Small recruiting footprint, low hiring manager churnManual may work: but monitor for candidate data access gaps

The bottom line

Ashby's SCIM requires moving from the transparent $400/month Foundations plan to custom-priced Growth or Enterprise tiers. For recruiting teams that need automated provisioning without the pricing uncertainty, Stitchflow delivers SOC 2-compliant automation at predictable flat-rate pricing.

Make Ashby workflows AI-native

Ashby gates SCIM behind Growth/Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Growth/Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SSO/SCIM on higher tiers only
  • No password authentication supported
  • Contact sales for enterprise pricing

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Ashby → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

OIN partner-built integration. Supports SSO, SCIM, entitlements, universal logout, workflows. OIDC connection available.

Ashby gates SCIM behind Growth/Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Ashby

Ashby gates SCIM behind Growth/Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Ashby logo
Ashby
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide
Airfocus logo

Airfocus

SCIM Tax

Product Management / Roadmapping

SCIM StatusIncluded
Manual Cost$11,754/yr

Airfocus supports SCIM provisioning, but only on Enterprise plans with custom pricing. While it handles basic user lifecycle management (create, update, deactivate), it lacks group provisioning entirely—meaning team assignments and workspace access must be managed manually. The Azure Entra integration also suffers from significant delays (~40 minutes for provisioning), creating gaps where users can't access product roadmaps they need immediately. For product management teams, this creates operational friction. Product managers, executives, and engineering leads need timely access to strategic roadmaps, but manual group assignments slow onboarding and complicate offboarding. Without automated group provisioning, IT teams must coordinate with product leads to ensure the right stakeholders have appropriate workspace access—exactly the kind of manual work SCIM should eliminate.

View full guide