Stitchflow
Customer.io logo

Customer.io SCIM guide

Native SCIM

How to automate Customer.io user provisioning, and what it actually costs

Native SCIM requires Premium/Enterprise plan

Summary and recommendation

Customer.io supports SCIM 2.0, but with significant limitations that undermine its usefulness for most IT teams. While SCIM is available on Premium/Enterprise plans, it only works with Cloudflare and JumpCloud identity providers—leaving Okta, Microsoft Entra, and Google Workspace users without automated provisioning. Even when SCIM is available, you cannot define user permissions through your IdP; all role assignments must be configured manually within Customer.io.

This creates a substantial operational gap for marketing and product teams that rely on Customer.io for customer engagement campaigns. Without broad IdP support, IT teams are forced into manual user management or workarounds like JIT provisioning through SSO, which doesn't address account deprovisioning when employees leave. For compliance-conscious organizations, this manual overhead introduces security risks around orphaned accounts and inconsistent access controls.

The strategic alternative

Customer.io gates SCIM behind Premium/Enterprise. Skip the Premium/Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?No
SSO available?Yes
SSO protocolSAML 2.0, OpenID Connect
DocumentationNot available

Supported identity providers

IdPSSOSCIMNotes
OktaSSO only
Microsoft Entra IDSSO only
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Customer.io accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Customer.io pricing problem

Customer.io gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Essentials$100/month (5,000 profiles)
Premium$1,000/month (annual)
Enterprise$28,000-$55,000/year

Note: Customer.io uses profile-based billing (maximum uniquely identified users), not traditional per-seat pricing. SCIM requires Enterprise tier and specific IdP compatibility.

What this means in practice

For organizations not using Cloudflare or JumpCloud as their primary IdP, accessing Customer.io's SCIM requires both a pricing tier upgrade and an identity infrastructure change:

Pricing Impact

Premium to Enterprise
+$27,000-$54,000/year minimum
Direct to Enterprise
$28,000-$55,000/year (negotiated based on profile volume)

Infrastructure Impact

Must use Cloudflare Access or JumpCloud as IdP
Cannot leverage existing Okta, Google Workspace, or Entra investments
Requires migration or dual IdP setup for Customer.io access

Additional constraints

Limited IdP support
SCIM only works with Cloudflare and JumpCloud, excluding the most common enterprise IdPs.
Permission limitations
User permissions cannot be defined via IdP and must be configured manually within Customer.io, even with SCIM enabled.
Profile-based billing
High-watermark billing model can create unexpected cost spikes during marketing campaigns or user growth periods.
Contract requirement
Enterprise pricing requires annual commitment with negotiated terms.

Summary of challenges

  • Customer.io supports SCIM but only at Enterprise tier ($28,000-$55,000/year (negotiated))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Customer.io doesn't sell SCIM à la carte. It's bundled with Premium/Enterprise features that most teams won't need:

SCIM 2.0 automated provisioning (Cloudflare and JumpCloud only)
SAML/OpenID Connect single sign-on
Custom user roles and permissions
Advanced workspace controls
Priority customer support
Enterprise-grade security features
Advanced reporting and analytics

The catch? Customer.io's SCIM implementation only works with Cloudflare and JumpCloud IdPs. If you're using Okta, Entra ID, or Google Workspace, you'll need to either switch identity providers or stick with JIT provisioning through SSO.

Stitchflow Insight

Even if you can use supported IdPs, you're paying $28,000-$55,000/year primarily for marketing automation features. We estimate ~80% of Premium/Enterprise capabilities are irrelevant for IT teams that simply want reliable user provisioning across their existing identity infrastructure.

What IT admins are saying

Community sentiment on Customer.io's SCIM limitations is mixed, with IT admins frustrated by the narrow IdP support and high enterprise pricing barriers.

  • SCIM 2.0 only works with Cloudflare and JumpCloud - excluding major IdPs like Okta and Entra
  • Enterprise pricing starts at $28K/year just to get automated provisioning
  • User permissions still require manual configuration in Customer.io after SCIM sync
  • High-watermark billing model creates unpredictable costs for growing teams

High-watermark billing can be expensive

Customer.io community feedback

The recurring theme

Customer.io's newly launched SCIM feels like an afterthought - limited IdP compatibility forces most organizations to stick with manual provisioning or expensive workarounds.

The decision

Your SituationRecommendation
On Essentials/Premium, need SCIMUse Stitchflow: avoid the $27K-54K/year Enterprise upgrade
Using Okta or Entra ID for provisioningUse Stitchflow: Customer.io's SCIM only works with Cloudflare and JumpCloud
Already on Enterprise with supported IdPUse native SCIM: you're paying $28K+ for it
Need Enterprise features beyond SCIMEvaluate Enterprise: SCIM comes bundled if you use supported IdPs
Small marketing team, low turnoverManual may work: but watch for workspace access gaps

The bottom line

Customer.io's SCIM requires both an Enterprise upgrade (starting at $28K/year) and using Cloudflare or JumpCloud as your IdP. For teams on lower tiers or using Okta/Entra, Stitchflow delivers provisioning automation without the massive tier jump or IdP constraints.

Make Customer.io workflows AI-native

Customer.io gates SCIM behind Premium/Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Premium/Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

None

Key limitations

  • SCIM 2.0 currently supports Cloudflare and JumpCloud IdPs
  • SSO on Premium/Enterprise plans
  • Custom roles on Premium+ only
  • Cannot define user permissions via IdP - must be set in Customer.io

Documentation not available.

Configuration for Okta

Integration type

Okta Integration Network (OIN) app

Where to enable

Okta Admin Console → Applications → Customer.io → Sign On

Okta SSO supported. SCIM not available through Okta - use Cloudflare or JumpCloud for SCIM.

Use Stitchflow for automated provisioning.

Unlock SCIM for
Customer.io

Customer.io gates SCIM behind Premium/Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Customer.io logo
Customer.io
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Braze logo

Braze

SCIM Tax

Customer Engagement / Marketing Automation

SCIM Tax+400%
Manual Cost$11,754/yr

Braze supports native SCIM with full user lifecycle management including group provisioning and workspace assignment. But SCIM is only available on Pro and Enterprise plans, which start at $3,500/month (up to 250,000 MAU) and scale to $60,000-$200,000/year for typical deployments. For smaller marketing teams on Growth plans ($1,000/month), upgrading solely for SCIM automation means tripling your annual costs. The pricing gap creates a significant problem: marketing teams need automated provisioning to manage workspace access and user permissions at scale, but the tier jump often exceeds their budget. While Braze offers SAML JIT provisioning as an alternative, it only works with IdP-initiated login and doesn't provide the granular workspace assignment control that SCIM offers.

View full guide
8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide