BeyondTrust SCIM guide

Delinea Secret Server supports full SCIM 2.0 provisioning with PAM-specific extensions for privileged access management. However, SCIM functionality is restricted to Enterprise plans, which carry custom enterprise pricing with a median cost of $19,705/year according to Vendr data. For organizations on Standard plans seeking automated privileged user provisioning, upgrading to Enterprise represents a significant cost increase primarily driven by advanced PAM features they may not need. The privileged access use case makes manual provisioning particularly problematic. Security teams need rapid provisioning and deprovisioning of privileged accounts to maintain zero-trust principles and comply with SOC 2 or similar frameworks. Manual processes create delays in granting just-in-time privileged access and increase the risk of orphaned privileged accounts—a critical security vulnerability that auditors flag immediately.

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.