Stitchflow
Chameleon logo

Chameleon SCIM guide

Native SCIM

How to automate Chameleon user provisioning, and what it actually costs

Native SCIM requires Any plan (add-on) plan

Summary and recommendation

Chameleon supports native SCIM 2.0 provisioning, but it's a paid add-on available on any plan. While this seems accessible, the real cost barrier emerges at scale: with base plans starting at $214-279/month for just 2,500 Monthly Tracked Users and 6 seats, teams often hit usage limits quickly and face significant per-MTU overages. The SSO/SCIM add-on compounds these costs, and role assignment requires careful attribute mapping to ensure proper permissions for tour building versus view-only access.

For growing product teams, this creates a provisioning gap where manual user management becomes necessary to control costs. Without automated role assignment, IT teams face ongoing overhead ensuring product managers get editor access while stakeholders remain view-only. The complexity of managing both MTU limits and role permissions manually increases security risks and administrative burden.

The strategic alternative

Chameleon gates SCIM behind Any plan (add-on). Skip the Any plan (add-on) plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredCustom
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OIDC
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Chameleon accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Chameleon pricing problem

Chameleon gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Startup$214-279/month
Add-on required
Growth$349-500/month
Add-on required
Enterprise$999+/month
Add-on required

Plan Structure

PlanPriceSCIM
Startup$214-279/monthAdd-on required
Growth$349-500/monthAdd-on required
Enterprise$999+/monthAdd-on required

Note: SSO and SCIM are bundled together as a single paid add-on available on any plan tier. Chameleon doesn't publish specific add-on pricing, requiring custom quotes.

What this means in practice

The add-on model creates budget friction across all customer segments:

Startup teams
already paying $214-279/month must justify additional spend for basic user management automation
Growth customers
face stacked costs on top of their $349-500/month base subscription
Enterprise buyers
paying $999+/month still need to budget separately for SCIM capabilities

The lack of transparent add-on pricing means procurement requires custom negotiations for what should be a standard security feature.

Additional constraints

Bundled with SSO
You can't purchase SCIM separately—it's packaged with SSO even if you only need provisioning automation.
Custom pricing
No published rates for the SSO/SCIM add-on, requiring sales conversations and custom quotes.
Role mapping complexity
Proper role assignment requires careful attribute mapping configuration between your IdP and Chameleon's role structure.
Namespace requirements
SCIM configuration requires proper namespace setup, adding technical complexity to the initial implementation.

Summary of challenges

  • Chameleon supports SCIM but only at Custom tier ($999+/month)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Chameleon doesn't sell SCIM à la carte. It's a paid add-on available on any plan, but comes bundled with broader SSO/security features:

SCIM 2.0 automated provisioning
SAML 2.0 and OIDC single sign-on
Multi-provider support (separate SSO and SCIM providers)
Role-based attribute mapping
Just-in-time (JIT) provisioning
Enhanced security compliance features

Stitchflow Insight

The add-on pricing isn't publicly disclosed, but given Chameleon's MTU-based model starting at $214/month for basic plans, expect meaningful additional cost. If your team only needs basic user provisioning without complex role mapping, you're paying for enterprise security features that may be overkill. We estimate ~60% of the SSO/SCIM bundle is irrelevant for teams that just want automated user lifecycle management.

What IT admins are saying

Community sentiment on Chameleon's SCIM add-on pricing is mixed. While native support exists, the additional cost creates friction for smaller teams. Common complaints:

  • SSO/SCIM being an expensive add-on rather than included feature
  • Having to pay extra for basic security automation on top of already high MTU pricing
  • Role mapping complexity requiring careful attribute configuration
  • SCIM namespace setup being more technical than expected

The add-on pricing for SSO really adds up when you're already paying per monthly tracked user. Wish this was just included.

IT Admin, Reddit

Setting up the SCIM namespace correctly took more back-and-forth with support than I expected for a 'native' integration.

SaaSOps Community

The recurring theme

Teams appreciate having native SCIM available on any plan tier, but the add-on cost model feels punitive when you're already paying premium MTU rates for a product adoption tool.

The decision

Your SituationRecommendation
Any plan, need SCIM without add-on costsUse Stitchflow: avoid the paid SSO/SCIM add-on
Small product team with simple access needsUse Stitchflow: easier than configuring SCIM namespaces
Already paying for SSO add-on, technical team availableUse native SCIM: you're paying for it anyway
Need Enterprise features (SOC 2, localization)Evaluate Enterprise tier: SCIM add-on comes with advanced features
Minimal user changes, Google OAuth acceptableManual may work: but watch for role assignment gaps

The bottom line

Chameleon charges for SSO/SCIM as an add-on across all plans, turning basic provisioning into an extra line item. For product teams that want automated user management without paying twice for identity features, Stitchflow delivers SCIM automation at flat pricing.

Make Chameleon workflows AI-native

Chameleon gates SCIM behind Any plan (add-on). We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Any plan (add-on) upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Custom

Prerequisites

SSO must be configured first

Key limitations

  • SSO/SCIM is a paid add-on
  • Role sync requires proper attribute mapping
  • SCIM namespace must be configured correctly

Unlock SCIM for
Chameleon

Chameleon gates SCIM behind Any plan (add-on). We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Chameleon logo
Chameleon
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide