Stitchflow
ClickUp logo

ClickUp SCIM guide

Native SCIM

How to automate ClickUp user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

ClickUp supports SCIM provisioning, but only on its Enterprise plan, which costs around $35/user/month (roughly $42,000/year for 100 users). Teams on the Business plan ($12/user/month) can access most premium features but are locked out of automated provisioning entirely. Making matters worse, ClickUp's SCIM implementation varies significantly by identity provider: Okta gets full provisioning with roles and teams, while Entra ID users are limited to basic user creation and removal only—no role assignments or team memberships.

For the 70% of organizations using Entra ID or other non-Okta IdPs, this creates a compliance gap. You're paying Enterprise pricing but getting hobbled functionality that still requires manual role and team management. Even with SSO enabled, IT teams must manually assign users to workspaces and set permissions, defeating the purpose of automated provisioning.

The strategic alternative

Stitchflow provides full SCIM-level provisioning through resilient browser automation for ClickUp without requiring the Enterprise upgrade. Works with any plan, any IdP (including full Entra ID support). Flat pricing under $5K/year, regardless of team size.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages ClickUp accounts manually. Here's what that costs:

Source: Stitchflow customers using ClickUp, normalized to 500 employees:
Orphaned accounts (ex-employees with access)3
Unused licenses50
IT hours spent on manual management/year217 hours
Unused license cost/year$10,678
IT labor cost/year$13,050
Cost of compliance misses/year$803
Total annual financial impact$24,531

The ClickUp pricing problem

ClickUp gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure (Billed Annually)

PlanPriceSSOSCIM
Business$12/user/mo
Enterprise~$35/user/mo

Note: Enterprise pricing is custom and not publicly listed. Based on market data, expect approximately $35/user/month (~$42k/year for 100 users) with potential 32-50% discounts for larger contracts.

What this means in practice

Using estimated Enterprise pricing (Business → Enterprise for SCIM):

Team SizeAnnual Upgrade CostMonthly Impact
50 users+$13,800/year+$1,150/month
100 users+$27,600/year+$2,300/month
200 users+$55,200/year+$4,600/month

Calculation: ($35 - $12) × users × 12 months

Additional constraints

Custom pricing opacity
Enterprise costs require sales negotiations with no transparent pricing.
IdP-specific limitations
Entra ID SCIM only supports user create/remove operations—no roles, custom roles, or team assignments. Okta gets full SCIM functionality.
SSO prerequisite
Custom SAML configuration is required before SCIM can be enabled.
No mid-tier option
Business plan includes advanced features but excludes basic user provisioning, forcing the jump to Enterprise.

Summary of challenges

  • ClickUp supports SCIM but only at Enterprise tier (~$35/user/month (custom, ~$42k/year for 100 users))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

ClickUp doesn't sell SCIM separately. It's bundled with Enterprise features at ~$35/user/month:

SCIM automated provisioning (with significant IdP limitations)
Custom SAML single sign-on (required before SCIM setup)
Advanced permissions and custom roles
White labeling and custom branding
Priority support and training
Advanced reporting and dashboards
API rate limit increases
Custom fields and automations

The SCIM implementation itself has serious gaps. Entra ID users get basic create/remove only—no roles, teams, or attribute sync. Even Okta's "full" SCIM can't import existing ClickUp users back to your IdP.

Stitchflow Insight

If you need Enterprise project management features anyway, the upgrade makes sense. If you just want reliable user provisioning, you're paying ~$25/user/month extra for features most IT teams won't use. We estimate roughly 80% of Enterprise features are irrelevant for organizations that primarily need automated provisioning.

What IT admins are saying

Community sentiment on ClickUp's Enterprise-only SCIM is mixed frustration. Common complaints:

  • Enterprise pricing that's completely opaque and significantly higher than other tiers
  • Entra ID getting second-class SCIM treatment compared to Okta
  • No SCIM availability on Business tier despite paying $12-19/user/month
  • Having to negotiate custom Enterprise pricing just for basic provisioning

Why does Azure AD get such limited SCIM support compared to Okta? We can only create/remove users but no role or team management.

ClickUp Community

Enterprise pricing isn't even listed - you have to go through sales just to find out it's probably 3x the Business plan.

Reddit r/sysadmin

The recurring theme

ClickUp forces expensive Enterprise upgrades for SCIM, then delivers inconsistent provisioning quality depending on your IdP choice.

The decision

Your SituationRecommendation
On Business plan, need SCIMUse Stitchflow: avoid the ~3x price jump to Enterprise
Enterprise pricing exceeds budgetUse Stitchflow: flat pricing under $5K/year vs ~$42K+
Using Entra ID, need full provisioningUse Stitchflow: native Entra support is create/remove only
Already on Enterprise planUse native SCIM: you're paying $35+/user for it
Small team with minimal user changesManual may work: but watch for security gaps as you grow

The bottom line

ClickUp's Enterprise-only SCIM requirement creates a massive cost barrier—jumping from $12/user to ~$35/user monthly. For teams that need automated provisioning without the Enterprise price tag, Stitchflow delivers full SCIM functionality at a fraction of the cost.

Automate ClickUp without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for ClickUp at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SCIM only on Enterprise plan
  • Entra ID has limited SCIM (user create/remove only vs Okta full)
  • Custom SAML required before SCIM setup

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → ClickUp → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Full automatic SCIM provisioning. Supports custom roles, limited member role. Team provisioning supported. Does not support importing existing users from ClickUp to Okta.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → ClickUp → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Limited SCIM provisioning - user create/remove only. No roles, custom roles, or teams sync. Automatic provisioning runs on 30-minute cycle. Requires custom SAML app (not gallery app).

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Unlock SCIM for
ClickUp

ClickUp gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee, saving you 192%.

See how it works
Admin Console
Directory
Applications
ClickUp logo
ClickUp
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Salesforce logo

Salesforce

SCIM Tax
SCIM Tax+600%
Manual Cost$25,970/yr

Salesforce supports SCIM 2.0 provisioning, but only on Enterprise ($175/user/month) and Unlimited ($350/user/month) editions. For organizations on Starter plans ($25/user/month), unlocking automated provisioning requires a 7x price increase—adding $150/user/month just to eliminate manual account management. For a 50-person team, that's $90,000/year in additional licensing costs solely to access SCIM capabilities. The pricing barrier creates a significant operational gap. Without automated provisioning, IT teams must manually create Salesforce accounts, assign profiles and permission sets, and remember to deactivate users when they leave—a process that's error-prone and doesn't scale. SSO alone doesn't solve this problem since it only handles authentication, not account lifecycle management. This manual overhead becomes particularly problematic in organizations with frequent role changes or seasonal hiring patterns.

View full guide
Google Cloud logo

Google Cloud

SCIM Tax

Cloud Infrastructure

SCIM StatusIncluded
Manual Cost$20,304/yr

Google Cloud Platform supports SCIM provisioning through Cloud Identity Premium at $7.20/user/month, but this creates a fundamental architectural challenge for IT teams. While Cloud Identity can sync users and groups from your IdP (Okta, Entra ID, etc.), it only handles identity provisioning—not the critical step of mapping users to specific GCP projects and IAM roles. This means IT admins face a two-step manual process: first provisioning identities through SCIM, then separately assigning project access and role permissions through GCP's IAM system. This separation between identity provisioning and access management creates significant operational overhead and security gaps. New developers might be provisioned as users but lack access to the projects they need to work on. Departing employees could have their Cloud Identity deactivated while retaining specific IAM permissions in individual projects. For enterprises managing hundreds of developers across multiple GCP projects, this dual-system approach makes compliance auditing complex and increases the risk of privilege creep.

View full guide
Gainsight logo

Gainsight

SCIM Tax

Customer Success

SCIM Tax+100%
Manual Cost$20,164/yr

Gainsight supports native SCIM provisioning, but only on Enterprise plans that typically cost $300+/user/month with custom pricing. This creates a significant barrier: customer success teams need automated provisioning to handle frequent role changes and customer data access requirements, but the Enterprise tier often represents a 2x+ price increase from standard plans. Additionally, Gainsight requires SAML SSO configuration before SCIM setup, and custom field mapping requires opening support tickets rather than self-service configuration. For customer success organizations, this pricing gate creates a problematic gap. CS teams experience high internal mobility as managers shift between accounts, and manual provisioning creates delays in accessing critical customer health data. The inSided community platform (part of Gainsight's ecosystem) doesn't support SCIM at all, forcing IT teams to manage those accounts separately through JIT provisioning.

View full guide