Stitchflow
ChatGPT (OpenAI) logo

ChatGPT (OpenAI) SCIM guide

Native SCIM

How to automate ChatGPT (OpenAI) user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

ChatGPT Enterprise supports native SCIM 2.0 for automated user provisioning, but OpenAI restricts this capability to their highest-tier Enterprise plan with custom pricing (estimated ~$60/seat for 70+ users). The Business plan includes SSO but deliberately excludes SCIM, forcing IT teams into manual user management despite paying $25-30/user/month. This creates a significant pricing cliff: teams must jump from Business to Enterprise—often doubling their spend—just to automate basic user lifecycle operations.

This gap between SSO and SCIM creates operational friction for IT teams managing AI tool adoption. While employees can authenticate through your identity provider on the Business plan, you still need to manually provision accounts, manage group memberships, and handle offboarding. For organizations rapidly scaling ChatGPT usage across departments, this manual overhead becomes a bottleneck. The 40-minute sync delay on Azure Entra ID compounds these challenges, making real-time access management impossible even on Enterprise.

The strategic alternative

Stitchflow provides SCIM-level provisioning through resilient browser automation for ChatGPT without requiring the Enterprise tier upgrade. Works with Business plans and any identity provider. Flat pricing under $5K/year, regardless of team size—potentially saving tens of thousands compared to OpenAI's Enterprise licensing requirements.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0 or OIDC
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages ChatGPT (OpenAI) accounts manually. Here's what that costs:

Source: Stitchflow customers using ChatGPT (OpenAI), normalized to 500 employees:
Orphaned accounts (ex-employees with access)10
Unused licenses21
IT hours spent on manual management/year32 hours
Unused license cost/year$3,368
IT labor cost/year$1,942
Cost of compliance misses/year$2,394
Total annual financial impact$7,705

The ChatGPT (OpenAI) pricing problem

ChatGPT (OpenAI) gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Plus$20/month (individual)
Business$25/user/month annual
Enterprise~$60/user/month (estimated)

Note: Business plan (formerly Team) was renamed in August 2025 and includes full SSO support but zero SCIM capabilities. Enterprise pricing is custom and not publicly disclosed.

What this means in practice

Since Enterprise pricing isn't transparent, using the estimated $60/seat rate (Business → Enterprise upgrade):

Team SizeAnnual Upgrade CostMonthly Impact
25 users+$10,500/year+$875/month
50 users+$21,000/year+$1,750/month
100 users+$42,000/year+$3,500/month

Calculation: ($60 - $25) × users × 12 months

Additional constraints

Sales-gated pricing
Enterprise requires contacting sales for custom quotes, with no published pricing transparency.
Hard SCIM boundary
Business tier offers zero automated provisioning despite being a premium plan - it's SSO or nothing.
Sync delays
Azure Entra ID users face 40-minute delays for SCIM changes, while Okta syncs more immediately.
Configuration complexity
SSO and SCIM share the same connection but must be configured independently, and enabling both Automatic Account Creation and SCIM simultaneously is explicitly not supported.

Summary of challenges

  • ChatGPT (OpenAI) supports SCIM but only at Enterprise tier (Custom pricing (~$60/seat estimated for 70+ users))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

ChatGPT doesn't sell SCIM à la carte. It's bundled with Enterprise features that cost ~$60/seat for 70+ users:

SCIM automated provisioning and deprovisioning
SAML 2.0 and OIDC single sign-on (SSO)
Advanced workspace administration
Enhanced security and compliance controls
Priority customer support
API Platform integration management
Custom usage policies and controls

The Business plan ($25-30/user/month) includes SSO but explicitly excludes SCIM provisioning - all user management remains manual. If you need automated user lifecycle management, Enterprise is your only option, despite most teams never touching the advanced workspace features.

Stitchflow Insight

We estimate ~60% of Enterprise features are irrelevant for teams that simply want to automate ChatGPT user provisioning without manual CSV uploads or individual invitations.

What IT admins are saying

Community sentiment on ChatGPT (OpenAI)'s SCIM limitations is consistently frustrated. Common complaints:

  • Business plan offers SSO but excludes SCIM despite being a premium tier
  • Forced Enterprise upgrade just for basic user provisioning automation
  • Opaque Enterprise pricing requiring sales calls for basic feature access
  • Azure users dealing with 40-minute sync delays for directory changes

Why does Business have SSO but not SCIM? Makes no sense - we need both for proper user management but now have to jump to Enterprise pricing.

Reddit r/sysadmin

The fact that you have to contact sales for Enterprise pricing just to get SCIM is annoying. Just tell us what it costs upfront.

Spiceworks Community

The recurring theme

OpenAI gates essential IT automation behind expensive Enterprise tiers while keeping pricing opaque, forcing unnecessary sales conversations for standard directory features.

The decision

Your SituationRecommendation
On Business plan, need SCIMUse Stitchflow: avoid the Enterprise upgrade (~2.4x cost increase)
Need transparent pricing for budgetingUse Stitchflow: flat rate vs. custom Enterprise quotes
Using Azure Entra IDUse Stitchflow: eliminate the 40-minute sync delay
Already on Enterprise planUse native SCIM: you're paying for it
Small team with minimal user changesManual provisioning may work: but monitor security gaps

The bottom line

ChatGPT forces you into opaque Enterprise pricing to get SCIM, despite Business plans supporting SSO. For teams that need automated provisioning without the Enterprise tier jump, Stitchflow delivers SCIM automation at predictable pricing.

Automate ChatGPT (OpenAI) without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for ChatGPT (OpenAI) at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Business plan has SSO but NO SCIM - all provisioning is manual
  • Must upgrade to Enterprise for any automated user management
  • Azure Entra has 40-minute delay for SCIM changes
  • SSO and SCIM share same connection but can be configured independently
  • Do not enable both Automatic Account Creation and SCIM simultaneously

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → ChatGPT (OpenAI) → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Enterprise required for SCIM

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → ChatGPT (OpenAI) → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Enterprise required for SCIM

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Unlock SCIM for
ChatGPT (OpenAI)

ChatGPT (OpenAI) gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee, saving you 200%.

See how it works
Admin Console
Directory
Applications
ChatGPT (OpenAI) logo
ChatGPT (OpenAI)
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Claude (Anthropic) logo

Claude (Anthropic)

SCIM Tax

AI / LLM Tools

SCIM Tax+250%
Manual Cost$11,754/yr

Claude supports SCIM 2.0 provisioning, but only on the Enterprise plan, which requires a minimum of 70 users and a 12-month contract starting around $50K annually. Teams on the $25-30/user/month Team plan get SSO but lose SCIM entirely—creating a significant gap where you can authenticate users but can't automatically provision or deprovision them. Even worse, Azure Entra users face a 40-minute delay for SCIM changes, making real-time access management impossible. This creates a compliance nightmare for IT teams. Without automated deprovisioning, former employees retain Claude access to potentially sensitive AI-assisted workflows involving proprietary data or code. Manual account management becomes unworkable as AI adoption scales across departments, and that 40-minute Azure delay means terminated employees could access Claude for nearly an hour after offboarding.

View full guide
LastPass logo

LastPass

SCIM Tax

Password Management / Security

SCIM Tax+75%
Manual Cost$9,705/yr

LastPass supports SCIM provisioning starting at the Business tier ($7/user/month), with integration support for all major identity providers including Okta, Entra ID, Google Workspace, and OneLogin. However, LastPass SCIM has critical limitations around deprovisioning: when users are removed, their vault access isn't immediately revoked, and shared folder permissions become complex to manage at scale. This creates a significant security gap for IT teams. Password vaults contain the most sensitive credentials in your organization—API keys, service accounts, privileged access passwords. When employees leave or change roles, their access to these credentials must be revoked immediately, not left accessible while IT manually cleans up vault permissions. SSO alone doesn't solve this because it only controls login authentication, not ongoing vault access or shared resource permissions.

View full guide
Asana logo

Asana

SCIM Tax
SCIM Tax+218%
Manual Cost$5,308/yr

Asana supports SCIM 2.0 provisioning, but only on Enterprise plans ($35/user/month). This creates a significant cost barrier for teams on Starter ($10.99/user/month) or Advanced ($24.99/user/month) plans who need automated user provisioning. For a 50-person team moving from Advanced to Enterprise just for SCIM, that's an additional $60,000 annually—often for enterprise features they don't need. The pricing gap is particularly problematic because Asana's Advanced plan already includes premium project management features that most teams require. Without SCIM, IT teams must manually provision users or rely on just-in-time (JIT) provisioning via SAML, which doesn't provide the same level of control over user lifecycle management and group assignments that full SCIM automation delivers.

View full guide