Stitchflow
Clearwater Analytics logo

Clearwater Analytics SCIM guide

Connector Only

How to automate Clearwater Analytics user provisioning, and what it actually costs

Native SCIM not available

Summary and recommendation

Clearwater Analytics, the institutional investment management platform managing $6.4 trillion in assets, does not offer SCIM provisioning capabilities on any plan. While an Okta OIN integration exists for SSO authentication, it provides no user provisioning functionality. This creates a significant operational burden for IT teams managing access to this mission-critical financial platform, as user accounts must be manually created, updated, and deprovisioned through Clearwater's admin interface.

The lack of automated provisioning is particularly problematic given Clearwater's enterprise-focused, quote-based pricing model and the sensitive nature of investment data it manages. IT teams face manual overhead for every joiner, mover, and leaver, while compliance teams struggle with timely access revocation—a serious concern when managing institutional investment portfolios. SSO alone doesn't address the fundamental challenge of keeping user accounts synchronized with your source of truth.

The strategic alternative

Clearwater Analytics has no native SCIM. Automate offboarding, user access reviews, and license workflows across every app, including the ones without APIs. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?No
SCIM tier requiredN/A
SSO required first?No
SSO available?Yes
SSO protocolSAML 2.0
DocumentationNot available

Supported identity providers

IdPSSOSCIMNotes
OktaOkta OIN integration exists but appears to be SSO only - no provisioning capabilities documented
Microsoft Entra IDVia third-partyNo Microsoft Entra provisioning documentation found
Google WorkspaceVia third-partyNo native support
OneLoginVia third-partyNo native support

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Clearwater Analytics accounts manually. Here's what that costs:

Source: Stitchflow research, normalized to 500 employees:
Orphaned accounts (ex-employees with access)5
Unused licenses12
IT hours spent on manual management/year85 hours
Unused license cost/year$3,500
IT labor cost/year$5,100
Cost of compliance misses/year$890
Total annual financial impact$9,490

The Clearwater Analytics pricing problem

Clearwater Analytics gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
EnterpriseCustom quote

Pricing structure

PlanPricingSCIM
EnterpriseCustom quote❌ Not available

Note: Clearwater Analytics operates on an enterprise-only model with custom pricing for all clients. No self-service or tiered plans are offered.

What this means in practice

IT administrators managing Clearwater Analytics access face manual provisioning across the entire user lifecycle:

New hires
Manual account creation through Clearwater's admin portal
Role changes
Manual permission updates when users change departments or responsibilities
Terminations
Manual deactivation with potential delays in access removal
Audits
No automated reporting on user access across investment portfolios

For organizations managing hundreds of investment professionals across multiple funds, this creates significant operational overhead and compliance risk.

Additional constraints

Enterprise-only pricing
All implementations require custom quotes and enterprise sales cycles
Investment data sensitivity
Manual user management increases risk of unauthorized access to portfolio data
Recent acquisition activity
Clearwater's April 2025 acquisition of Enfusion may create additional integration complexity
No IdP flexibility
Limited to basic SSO integration with select identity providers
Audit trail gaps
Manual provisioning creates incomplete logs for compliance reporting

Summary of challenges

  • Clearwater Analytics does not provide native SCIM at any price tier
  • Organizations must rely on third-party tools or manual provisioning
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What Clearwater Analytics actually offers for identity

SAML SSO (Enterprise-only)

Clearwater Analytics provides SAML 2.0 single sign-on as part of their enterprise offering:

SettingDetails
ProtocolSAML 2.0
Supported IdPsMajor identity providers (specific list not documented)
Pricing tierEnterprise (custom quote required)
User managementManual provisioning required

Key limitation: Like most financial services platforms, Clearwater Analytics requires manual user provisioning. SSO handles authentication, but IT teams must still create, update, and deactivate user accounts through the platform's admin interface.

Okta Integration (SSO-only)

The official Okta Integration Network listing for Clearwater Analytics shows:

FeatureSupported?
SAML SSO✓ Yes
SCIM provisioning❌ No
Create users❌ No
Update users❌ No
Deactivate users❌ No
Group management❌ No

Bottom line: The Okta integration provides federated authentication but zero provisioning capabilities. Every user lifecycle operation—onboarding new analysts, updating roles, offboarding departing employees—requires manual intervention in Clearwater's interface.

Enterprise Pricing Reality

Clearwater Analytics operates on a custom quote model typical of institutional asset management platforms. While exact pricing isn't public, enterprise financial services software typically runs $50K-$500K+ annually depending on assets under management and user count.

The disconnect: You're paying enterprise-tier pricing but still managing users manually like it's 2015.

What IT admins are saying

Clearwater Analytics's enterprise-only access model and limited provisioning options frustrate IT teams managing financial software portfolios:

  • Manual user provisioning required despite enterprise pricing
  • No SCIM support documented even at enterprise tier
  • Okta integration exists but provisioning capabilities unclear
  • Custom pricing makes budget planning difficult for IT departments

User accounts must exist in Clearwater Analytics before SSO authentication will work... provisioning must be handled separately from your identity provider.

IT administrator feedback

Even with their enterprise solution, we're still managing user lifecycles manually across multiple financial platforms.

Finance sector IT director

The recurring theme

Despite managing $6.4 trillion in assets and commanding enterprise pricing, Clearwater Analytics forces IT teams into manual user management workflows that don't scale with modern identity governance requirements.

The decision

Your SituationRecommendation
Small finance team (<20 users) with minimal turnoverManual user management acceptable
Mid-size organization managing investment portfoliosUse Stitchflow: automation needed for compliance auditing
Enterprise with complex asset management workflowsUse Stitchflow: essential for SOX compliance and audit trails
Multi-entity organizations with frequent role changesUse Stitchflow: automation critical for segregation of duties
Organizations requiring tight integration with HR systemsUse Stitchflow: no native provisioning alternatives available

The bottom line

Clearwater Analytics handles $6.4 trillion in assets but offers no SCIM provisioning capabilities despite enterprise-level pricing. For organizations that need automated user lifecycle management in their investment management platform, Stitchflow delivers the provisioning automation that Clearwater doesn't provide natively.

Make Clearwater Analytics workflows AI-native

Clearwater Analytics has no native SCIM. We build complete offboarding, user access reviews, and license workflows across every app, including the ones without APIs.

Covers apps without native SCIM, including the ones without APIs
Less than a week, start to finish (~2 hours of your time)
Built with your team; extend to anything else in the company
Book a Demo

Technical specifications

SCIM Version

Not specified

Supported Operations

Not specified

Supported Attributes

No SCIM provisioning documentation foundOkta integration exists but provisioning capabilities unclearEnterprise-only custom pricing modelManages $6.4 trillion in assets across insurance, asset management, corporate, and government sectorsAcquired Enfusion in April 2025

Plan requirement

Not specified

Prerequisites

Not specified

Key limitations

  • No SCIM provisioning documentation found
  • Okta integration exists but provisioning capabilities unclear
  • Enterprise-only custom pricing model
  • Manages $6.4 trillion in assets across insurance, asset management, corporate, and government sectors
  • Acquired Enfusion in April 2025

Documentation not available.

Configuration for Okta

Integration type

Okta Integration Network (OIN) app

Where to enable

Okta Admin Console → Applications → Clearwater Analytics → Sign On

Okta OIN integration exists but appears to be SSO only - no provisioning capabilities documented

Use Stitchflow for automated provisioning.

Unlock SCIM for
Clearwater Analytics

Clearwater Analytics has no native SCIM. We still automate end-to-end workflows across every app, including the ones without APIs.

See how it works
Admin Console
Directory
Applications
Clearwater Analytics logo
Clearwater Analytics
via Stitchflow

Last updated: 2026-01-20

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Abnormal Security logo

Abnormal Security

No SCIM

Security / Email Security

ProvisioningNot Supported
Manual Cost$9,490/yr

Abnormal Security, the AI-powered email security platform protecting against BEC and phishing attacks, does not offer SCIM provisioning on any plan. While the platform supports SAML 2.0 SSO integration with identity providers like Okta and Entra ID, this only handles authentication—not automated user lifecycle management. Security teams must manually provision and deprovision analyst access through Abnormal's portal, creating operational overhead and potential security gaps in a platform specifically designed to protect against email-based threats. This manual provisioning model creates significant challenges for security operations. When new SOC analysts join or existing team members change roles, IT admins must coordinate manual account creation and permission updates in Abnormal Security. For a platform that's critical to threat detection and incident response, delays in provisioning can leave security gaps, while delayed deprovisioning creates compliance risks. The irony is stark: a security platform designed to prevent account takeover and credential abuse lacks the automated provisioning controls that prevent exactly these risks.

View full guide
Airwallex logo

Airwallex

No SCIM
ProvisioningNot Supported
Manual Cost$9,490/yr

Airwallex, the global payments and treasury platform, offers no SCIM provisioning support on any plan, including their custom Accelerate enterprise tier. Despite being positioned for enterprise use with features like multi-entity management and advanced treasury controls, Airwallex lacks any official identity provider integrations—no SSO, no provisioning, and no presence in major IdP galleries like Okta's OIN or Microsoft Entra. This creates a significant operational burden for IT teams managing financial access across growing organizations, where manual user provisioning and deprovisioning in a payments platform presents both efficiency and security risks. The absence of identity management capabilities means IT administrators must manually create, update, and remove user accounts in Airwallex—a particularly concerning gap given that this platform handles sensitive financial operations, cross-border payments, and treasury management. Without automated deprovisioning, former employees could retain access to financial systems, creating compliance risks and potential security vulnerabilities that most finance and IT teams cannot afford to overlook.

View full guide
Alkami logo

Alkami

No SCIM
ProvisioningNot Supported
Manual Cost$9,490/yr

Alkami, the digital banking platform used by banks and credit unions, does not offer SCIM provisioning or public SSO integrations. As an enterprise-only platform with custom pricing, Alkami appears to handle user management through direct account administration rather than standardized identity protocols. This creates significant challenges for financial institutions that need to integrate Alkami with their existing identity infrastructure—particularly problematic given the compliance requirements and security standards that banks must maintain. The lack of automated provisioning means IT teams at financial institutions must manually create, update, and deprovision user accounts in Alkami. For a platform handling sensitive financial data and customer information, this manual approach introduces compliance risks and operational overhead. Banks typically require seamless integration between their core identity systems and all applications accessing customer data.

View full guide