Summary and recommendation
Canva supports SCIM provisioning, but only on Enterprise plans with custom pricing. Teams subscribers—despite paying $10/user/month—are completely locked out of automated provisioning. This creates a significant cost barrier: upgrading from Teams to Enterprise just to unlock SCIM often means paying custom Enterprise pricing that can be 3-5x higher than Teams rates.
The gap between Teams and Enterprise leaves mid-market organizations in a provisioning dead zone. You're paying for Canva but can't automate user lifecycle management, creating manual overhead for IT teams and compliance gaps when employees change roles or leave the company. SSO with JIT provisioning partially fills this gap but doesn't handle deprovisioning—former employees retain access until manually removed.
The strategic alternative
Stitchflow provides SCIM-level provisioning through resilient browser automation for Canva without requiring the Enterprise upgrade. Works with Teams plans and any identity provider. Flat pricing under $5K/year, regardless of team size.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Canva accounts manually. Here's what that costs:
The Canva pricing problem
Canva gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure (Billed Annually)
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Teams | $10/user/mo | ||
| Pro | $15/user/mo | ||
| Enterprise | Custom pricing |
Note: SCIM is exclusively available on Enterprise plans. Teams subscribers cannot access SCIM despite being a paid tier designed for business use.
What this means in practice
Without transparent Enterprise pricing, IT teams face uncertainty when budgeting for SCIM access. Based on typical SaaS enterprise pricing patterns, the jump from Teams to Enterprise likely represents a significant cost increase:
| Current Teams Cost | Estimated Enterprise Premium |
|---|---|
| $6,000/year (50 users) | Unknown—custom pricing required |
| $12,000/year (100 users) | Unknown—custom pricing required |
| $24,000/year (200 users) | Unknown—custom pricing required |
Teams customers must either accept manual user management or commit to an enterprise sales process with undisclosed pricing.
Additional constraints
Summary of challenges
- Canva supports SCIM but only at Enterprise tier (Custom pricing)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Canva doesn't sell SCIM à la carte. It's bundled with Enterprise features that most Teams subscribers don't need:
The catch: Teams subscribers are completely locked out of SCIM, despite paying $10/user/month. You're forced into custom Enterprise pricing just to get basic user provisioning—a feature that should be standard on any paid business plan.
Stitchflow Insight
We estimate ~60% of Enterprise features are administrative bloat for teams that simply want automated user management. You're essentially paying enterprise rates for a single feature that costs pennies to operate.
What IT admins are saying
Community sentiment on Canva's SCIM restrictions is consistently frustrated. Common complaints:
- SCIM locked behind Enterprise custom pricing with no transparency
- Teams plan subscribers completely excluded from basic provisioning
- Arbitrary feature gating that forces unnecessary upgrades
- Having to negotiate custom Enterprise deals just for user lifecycle automation
It's frustrating that Teams subscribers can't get SCIM when we're already paying. We don't need Enterprise features, just basic user provisioning.
The jump from Teams to Enterprise feels like a cash grab. Why can't they just add SCIM as a paid add-on for Teams?
The recurring theme
Canva artificially restricts SCIM to their highest tier, forcing mid-market teams to either overpay for Enterprise or manage users manually despite already being on a paid plan.
The decision
| Your Situation | Recommendation |
|---|---|
| On Teams plan, need SCIM | Use Stitchflow: Teams subscribers can't access SCIM at all |
| On Pro plan, need SCIM | Use Stitchflow: avoid the Enterprise custom pricing jump |
| Already on Enterprise with SCIM | Use native SCIM: you're paying for it |
| Need Enterprise features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with custom pricing |
| Small team, low employee churn | Manual may work: but watch for security gaps as you scale |
The bottom line
Canva locks SCIM behind Enterprise's custom pricing wall, leaving Teams and Pro subscribers without provisioning automation despite paying monthly fees. For teams that need automated user management without the Enterprise upgrade, Stitchflow delivers SCIM functionality at a predictable <$5K/year flat rate.
Automate Canva without the tier upgrade
Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Canva at <$5K/year, flat, regardless of team size.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- SCIM only on Enterprise - not available on Teams
- Not available for new Teams subscribers
- JIT only on Enterprise and Canva for Campus
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Enterprise required for SCIM
Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Enterprise required for SCIM
Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.
Unlock SCIM for
Canva
Canva gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee.
See how it works


