Summary and recommendation
Clearwater Analytics, the institutional investment management platform managing $6.4 trillion in assets, does not offer SCIM provisioning capabilities on any plan. While an Okta OIN integration exists for SSO authentication, it provides no user provisioning functionality. This creates a significant operational burden for IT teams managing access to this mission-critical financial platform, as user accounts must be manually created, updated, and deprovisioned through Clearwater's admin interface.
The lack of automated provisioning is particularly problematic given Clearwater's enterprise-focused, quote-based pricing model and the sensitive nature of investment data it manages. IT teams face manual overhead for every joiner, mover, and leaver, while compliance teams struggle with timely access revocation—a serious concern when managing institutional investment portfolios. SSO alone doesn't address the fundamental challenge of keeping user accounts synchronized with your source of truth.
The strategic alternative
Clearwater Analytics has no native SCIM. Automate offboarding, user access reviews, and license workflows across every app, including the ones without APIs. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | No |
| SCIM tier required | N/A |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ❌ | Okta OIN integration exists but appears to be SSO only - no provisioning capabilities documented |
| Microsoft Entra ID | Via third-party | ❌ | No Microsoft Entra provisioning documentation found |
| Google Workspace | Via third-party | ❌ | No native support |
| OneLogin | Via third-party | ❌ | No native support |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Clearwater Analytics accounts manually. Here's what that costs:
The Clearwater Analytics pricing problem
Clearwater Analytics gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Enterprise | Custom quote |
Pricing structure
| Plan | Pricing | SCIM |
|---|---|---|
| Enterprise | Custom quote | ❌ Not available |
Note: Clearwater Analytics operates on an enterprise-only model with custom pricing for all clients. No self-service or tiered plans are offered.
What this means in practice
IT administrators managing Clearwater Analytics access face manual provisioning across the entire user lifecycle:
For organizations managing hundreds of investment professionals across multiple funds, this creates significant operational overhead and compliance risk.
Additional constraints
Summary of challenges
- Clearwater Analytics does not provide native SCIM at any price tier
- Organizations must rely on third-party tools or manual provisioning
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What Clearwater Analytics actually offers for identity
SAML SSO (Enterprise-only)
Clearwater Analytics provides SAML 2.0 single sign-on as part of their enterprise offering:
| Setting | Details |
|---|---|
| Protocol | SAML 2.0 |
| Supported IdPs | Major identity providers (specific list not documented) |
| Pricing tier | Enterprise (custom quote required) |
| User management | Manual provisioning required |
Key limitation: Like most financial services platforms, Clearwater Analytics requires manual user provisioning. SSO handles authentication, but IT teams must still create, update, and deactivate user accounts through the platform's admin interface.
Okta Integration (SSO-only)
The official Okta Integration Network listing for Clearwater Analytics shows:
| Feature | Supported? |
|---|---|
| SAML SSO | ✓ Yes |
| SCIM provisioning | ❌ No |
| Create users | ❌ No |
| Update users | ❌ No |
| Deactivate users | ❌ No |
| Group management | ❌ No |
Bottom line: The Okta integration provides federated authentication but zero provisioning capabilities. Every user lifecycle operation—onboarding new analysts, updating roles, offboarding departing employees—requires manual intervention in Clearwater's interface.
Enterprise Pricing Reality
Clearwater Analytics operates on a custom quote model typical of institutional asset management platforms. While exact pricing isn't public, enterprise financial services software typically runs $50K-$500K+ annually depending on assets under management and user count.
The disconnect: You're paying enterprise-tier pricing but still managing users manually like it's 2015.
What IT admins are saying
Clearwater Analytics's enterprise-only access model and limited provisioning options frustrate IT teams managing financial software portfolios:
- Manual user provisioning required despite enterprise pricing
- No SCIM support documented even at enterprise tier
- Okta integration exists but provisioning capabilities unclear
- Custom pricing makes budget planning difficult for IT departments
User accounts must exist in Clearwater Analytics before SSO authentication will work... provisioning must be handled separately from your identity provider.
Even with their enterprise solution, we're still managing user lifecycles manually across multiple financial platforms.
The recurring theme
Despite managing $6.4 trillion in assets and commanding enterprise pricing, Clearwater Analytics forces IT teams into manual user management workflows that don't scale with modern identity governance requirements.
The decision
| Your Situation | Recommendation |
|---|---|
| Small finance team (<20 users) with minimal turnover | Manual user management acceptable |
| Mid-size organization managing investment portfolios | Use Stitchflow: automation needed for compliance auditing |
| Enterprise with complex asset management workflows | Use Stitchflow: essential for SOX compliance and audit trails |
| Multi-entity organizations with frequent role changes | Use Stitchflow: automation critical for segregation of duties |
| Organizations requiring tight integration with HR systems | Use Stitchflow: no native provisioning alternatives available |
The bottom line
Clearwater Analytics handles $6.4 trillion in assets but offers no SCIM provisioning capabilities despite enterprise-level pricing. For organizations that need automated user lifecycle management in their investment management platform, Stitchflow delivers the provisioning automation that Clearwater doesn't provide natively.
Make Clearwater Analytics workflows AI-native
Clearwater Analytics has no native SCIM. We build complete offboarding, user access reviews, and license workflows across every app, including the ones without APIs.
Technical specifications
SCIM Version
Not specifiedSupported Operations
Not specifiedSupported Attributes
Plan requirement
Not specifiedPrerequisites
Not specifiedKey limitations
- No SCIM provisioning documentation found
- Okta integration exists but provisioning capabilities unclear
- Enterprise-only custom pricing model
- Manages $6.4 trillion in assets across insurance, asset management, corporate, and government sectors
- Acquired Enfusion in April 2025
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app
Where to enable
Docs
Okta OIN integration exists but appears to be SSO only - no provisioning capabilities documented
Use Stitchflow for automated provisioning.
Unlock SCIM for
Clearwater Analytics
Clearwater Analytics has no native SCIM. We still automate end-to-end workflows across every app, including the ones without APIs.
See how it works


