Stitchflow
Canva logo

Canva SCIM guide

Native SCIM

How to automate Canva user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Canva supports SCIM provisioning, but only on Enterprise plans with custom pricing. Teams subscribers—despite paying $10/user/month—are completely locked out of automated provisioning. This creates a significant cost barrier: upgrading from Teams to Enterprise just to unlock SCIM often means paying custom Enterprise pricing that can be 3-5x higher than Teams rates.

The gap between Teams and Enterprise leaves mid-market organizations in a provisioning dead zone. You're paying for Canva but can't automate user lifecycle management, creating manual overhead for IT teams and compliance gaps when employees change roles or leave the company. SSO with JIT provisioning partially fills this gap but doesn't handle deprovisioning—former employees retain access until manually removed.

The strategic alternative

Stitchflow provides SCIM-level provisioning through resilient browser automation for Canva without requiring the Enterprise upgrade. Works with Teams plans and any identity provider. Flat pricing under $5K/year, regardless of team size.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Canva accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Canva pricing problem

Canva gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure (Billed Annually)

PlanPriceSSOSCIM
Teams$10/user/mo
Pro$15/user/mo
EnterpriseCustom pricing

Note: SCIM is exclusively available on Enterprise plans. Teams subscribers cannot access SCIM despite being a paid tier designed for business use.

What this means in practice

Without transparent Enterprise pricing, IT teams face uncertainty when budgeting for SCIM access. Based on typical SaaS enterprise pricing patterns, the jump from Teams to Enterprise likely represents a significant cost increase:

Current Teams CostEstimated Enterprise Premium
$6,000/year (50 users)Unknown—custom pricing required
$12,000/year (100 users)Unknown—custom pricing required
$24,000/year (200 users)Unknown—custom pricing required

Teams customers must either accept manual user management or commit to an enterprise sales process with undisclosed pricing.

Additional constraints

Sales process required
Enterprise pricing requires contacting Canva's sales team—no self-service option.
Feature gap
Teams plan includes collaboration features businesses need but excludes basic IT management capabilities.
JIT limitations
Just-in-time provisioning is also restricted to Enterprise and Education plans, limiting SSO-only workarounds.
No granular options
Canva offers no middle-tier plan that includes SCIM without full Enterprise features.

Summary of challenges

  • Canva supports SCIM but only at Enterprise tier (Custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Canva doesn't sell SCIM à la carte. It's bundled with Enterprise features that most Teams subscribers don't need:

SCIM automated provisioning
SAML single sign-on (SSO)
Advanced brand controls and templates
Priority support
Extended version history
Advanced team permissions
Content planner and publishing tools
Custom fonts and brand kit expansion

The catch: Teams subscribers are completely locked out of SCIM, despite paying $10/user/month. You're forced into custom Enterprise pricing just to get basic user provisioning—a feature that should be standard on any paid business plan.

Stitchflow Insight

We estimate ~60% of Enterprise features are administrative bloat for teams that simply want automated user management. You're essentially paying enterprise rates for a single feature that costs pennies to operate.

What IT admins are saying

Community sentiment on Canva's SCIM restrictions is consistently frustrated. Common complaints:

  • SCIM locked behind Enterprise custom pricing with no transparency
  • Teams plan subscribers completely excluded from basic provisioning
  • Arbitrary feature gating that forces unnecessary upgrades
  • Having to negotiate custom Enterprise deals just for user lifecycle automation

It's frustrating that Teams subscribers can't get SCIM when we're already paying. We don't need Enterprise features, just basic user provisioning.

Reddit r/sysadmin

The jump from Teams to Enterprise feels like a cash grab. Why can't they just add SCIM as a paid add-on for Teams?

Spiceworks Community

The recurring theme

Canva artificially restricts SCIM to their highest tier, forcing mid-market teams to either overpay for Enterprise or manage users manually despite already being on a paid plan.

The decision

Your SituationRecommendation
On Teams plan, need SCIMUse Stitchflow: Teams subscribers can't access SCIM at all
On Pro plan, need SCIMUse Stitchflow: avoid the Enterprise custom pricing jump
Already on Enterprise with SCIMUse native SCIM: you're paying for it
Need Enterprise features beyond SCIMEvaluate Enterprise: SCIM comes bundled with custom pricing
Small team, low employee churnManual may work: but watch for security gaps as you scale

The bottom line

Canva locks SCIM behind Enterprise's custom pricing wall, leaving Teams and Pro subscribers without provisioning automation despite paying monthly fees. For teams that need automated user management without the Enterprise upgrade, Stitchflow delivers SCIM functionality at a predictable <$5K/year flat rate.

Automate Canva without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Canva at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SCIM only on Enterprise - not available on Teams
  • Not available for new Teams subscribers
  • JIT only on Enterprise and Canva for Campus

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Canva → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Enterprise required for SCIM

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Canva → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Enterprise required for SCIM

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Unlock SCIM for
Canva

Canva gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee.

See how it works
Admin Console
Directory
Applications
Canva logo
Canva
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide