Stitchflow
Cognism logo

Cognism SCIM guide

Native SCIM

How to automate Cognism user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Cognism supports native SCIM provisioning, but only through Okta integrations on Enterprise plans. This creates a significant limitation: teams using Microsoft Entra ID, Google Workspace, or OneLogin can't access automated provisioning, forcing them to rely on manual account management or just-in-time provisioning for a sales intelligence platform where data access controls are critical.

For sales organizations, this limitation is particularly problematic. Cognism's pricing starts at $15K+ annually with per-user fees reaching $2,500/year on Diamond plans. Without proper SCIM support across all identity providers, IT teams can't efficiently manage user lifecycles or ensure proper group assignments for data credit allocation and prospect access controls. Manual provisioning becomes a bottleneck when sales teams need rapid onboarding and offboarding.

The strategic alternative

Cognism gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OAuth 2.0 (Microsoft, Google)
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDSSO only
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Cognism accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Cognism pricing problem

Cognism gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Platinum$15,000 flat + $1,500/user/year
Diamond$25,000 flat + $2,500/user/year
EnterpriseCustom pricing

Note: SCIM requires both Enterprise tier AND Okta as your identity provider. Other IdPs like Microsoft Entra or Google Workspace only support OAuth SSO without provisioning.

What this means in practice

Cognism's flat fee structure makes smaller teams particularly expensive:

10-person sales team

Platinum
$30,000/year ($3,000/user)
Diamond
$50,000/year ($5,000/user)
Enterprise
Custom (typically $50K+ minimum)

25-person sales team

Platinum
$52,500/year ($2,100/user)
Diamond
$87,500/year ($3,500/user)
Enterprise
Custom (likely $75K+ given the pattern)

The flat fee structure means SCIM access becomes prohibitively expensive for smaller sales teams that still need automated provisioning for data credit management.

Additional constraints

Okta dependency
SCIM only works with Okta, forcing organizations using Microsoft Entra or Google Workspace to either switch IdPs or forgo automated provisioning.
Annual contracts only
No monthly billing option means significant upfront commitment for Enterprise features.
Custom enterprise pricing
No transparent pricing for SCIM-enabled tiers makes budgeting difficult.
Data credit allocation
Without SCIM, sales ops teams must manually manage user access and data credit distribution across prospect databases.

Summary of challenges

  • Cognism supports SCIM but only at Enterprise tier (custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Cognism doesn't sell SCIM à la carte. It's bundled with Enterprise features and requires Okta as your IdP:

SCIM automated provisioning (Okta-only)
SAML 2.0 single sign-on
OAuth 2.0 integration (Microsoft, Google)
Just-in-time (JIT) provisioning
Enhanced security controls
Enterprise support
Custom contract terms and pricing

The major limitation: SCIM only works through Okta's integration. If you use Microsoft Entra ID, Google Workspace, or OneLogin, you're limited to SAML SSO with JIT provisioning.

Stitchflow Insight

For sales teams that just need automated user provisioning across multiple IdPs, you're paying enterprise prices ($15K-$100K+ annually) for a solution that only works with one identity provider. We estimate ~60% of Enterprise features are irrelevant for teams that simply want reliable SCIM provisioning regardless of their IdP choice.

What IT admins are saying

Community sentiment on Cognism's SCIM limitations centers around vendor lock-in frustrations. Common complaints:

  • SCIM provisioning only works through Okta, not other major IdPs
  • Enterprise pricing requirements just to get basic identity automation
  • Limited flexibility for multi-IdP environments
  • Being forced into Okta ecosystem despite preferring Microsoft or Google

Why would they limit SCIM to just Okta when most enterprise customers are already committed to Microsoft or Google?

IT Admin, Reddit

The Okta-only SCIM requirement means we'd need to maintain two identity systems or force a migration just for one app.

Identity Engineer, Spiceworks

The recurring theme

Cognism's Okta-exclusive SCIM creates unnecessary architectural constraints, forcing IT teams to work around vendor limitations rather than standardizing on their preferred identity platform.

The decision

Your SituationRecommendation
Need SCIM but using Entra ID, Google Workspace, or OneLoginUse Stitchflow: Cognism's SCIM only works with Okta
On lower pricing tiers, don't need full Enterprise featuresUse Stitchflow: avoid the $15K+ annual minimum upgrade
Already on Enterprise with OktaUse native SCIM: you're paying Enterprise pricing anyway
Need Enterprise features beyond SCIM (phone verification, intent data)Evaluate Enterprise upgrade: SCIM comes bundled with Okta
Small sales team, low turnoverManual may work: but watch for data access gaps during onboarding

The bottom line

Cognism gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.

Close the Cognism workflow gap

Cognism gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.

Across every app in the workflow, including the ones without APIs
Built in less than a week, with roughly 2 hours from your team
You review the exceptions. Stitchflow maintains the workflow underneath
Start with the free gap diagnostic

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SCIM only via Okta integration
  • SP initiated for OAuth, IdP initiated for SAML
  • Configure Okta app for provisioning

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Cognism → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

SCIM only available via Okta integration. Supports user create, update, deactivate, group linking, and schema discovery.

Cognism gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Cognism → Single sign-on

SSO tutorial available but SCIM provisioning is Okta-only.

Use Stitchflow for automated provisioning.

Close the workflow gap in
Cognism

Cognism gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.

Start with the free gap diagnostic
Admin Console
Directory
Applications
Cognism logo
Cognism
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide