Stitchflow
Datarails logo

Datarails SCIM guide

Native SCIM

How to automate Datarails user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Datarails offers native SCIM provisioning, but only on Enterprise plans that start at $27,000/year with implementation costs reaching $50,000+. More problematic: Datarails doesn't support Microsoft Azure/Entra ID for SAML SSO at all, which blocks SCIM entirely for the majority of enterprise organizations using Microsoft's identity stack. Even for Okta users, SCIM operations run under the token owner's account, creating a single point of failure.

For finance teams managing FP&A models and reports, this Azure limitation creates a significant gap. Without automated provisioning, IT teams must manually manage analyst access to financial models and role-based report visibility—exactly the kind of repetitive, error-prone work that defeats the purpose of having an enterprise FP&A platform. The high Enterprise pricing barrier compounds this problem for mid-market finance teams.

The strategic alternative

Datarails gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDSSO only
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Datarails accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Datarails pricing problem

Datarails gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
StandardCustom pricing
Enterprise$27,000-$88,500/year

Note: All pricing is custom and requires sales consultation. Implementation services cost an additional $10,000-$50,000+.

What this means in practice

Based on reported Enterprise pricing ranges:

Finance Team SizeMinimum Enterprise CostAverage Enterprise CostMaximum Enterprise Cost
Small team (10-20)$27,000/year$57,750/year$88,500/year
Mid-size (20-50)$27,000/year$57,750/year$88,500/year
Large enterprise$27,000/year$57,750/year$88,500/year

Plus implementation: $10,000-$50,000+ one-time cost for setup and configuration.

Additional constraints

No public pricing
All deals require enterprise sales process with custom quotes.
Microsoft limitation
Azure/Entra ID cannot connect to Datarails at all - SAML protocol not supported by Microsoft for this application.
Token dependency
SCIM operations run under the admin user's account who generated the token, creating a single point of failure.
Implementation required
Professional services typically needed for Enterprise deployment, adding significant upfront costs.

Summary of challenges

  • Datarails supports SCIM but only at Enterprise tier (custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Datarails doesn't sell SCIM à la carte. It's bundled with Enterprise features at $27,000/year average pricing:

SCIM automated provisioning (token-based)
SAML 2.0 single sign-on
Advanced financial model security
Role-based access controls for reports
Enhanced data governance
Dedicated customer success manager
Implementation services ($10,000-$50,000+)

The catch: Microsoft Azure/Entra ID isn't supported for SAML authentication, making this a non-starter for Azure shops. SCIM operations also run under the admin token owner's account, creating potential security and audit concerns.

Stitchflow Insight

If you need enterprise FP&A controls anyway, the upgrade makes sense for Okta environments. If you just want automated user provisioning or use Azure, you're paying enterprise prices for a solution with significant IdP limitations. We estimate ~60% of Enterprise features are irrelevant for finance teams that only need basic provisioning automation.

What IT admins are saying

Community sentiment on Datarails's SCIM implementation reveals significant frustration with Microsoft ecosystem compatibility. Common complaints:

  • Azure/Microsoft Entra ID completely unsupported for SAML authentication
  • SCIM tokens tied to individual admin accounts create operational risk
  • Enterprise-only pricing forces expensive upgrades for basic provisioning
  • Limited IdP choices exclude many Microsoft-centric organizations

Azure SAML not supported

Multiple community reports

The recurring theme

Microsoft shops are locked out entirely, while other organizations face high enterprise pricing barriers and risky token-based provisioning that breaks when admin users leave.

The decision

Your SituationRecommendation
Need SCIM but don't want enterprise pricingUse Stitchflow: avoid the $27K-88K/year enterprise upgrade
Using Microsoft Entra ID/Azure ADUse Stitchflow: Azure SAML isn't supported by Datarails
Want SCIM without $10K-50K implementation costsUse Stitchflow: build complete workflows across every app in less than a week (~2 hours of your time).
Already on Enterprise with dedicated IT resourcesUse native SCIM: you're paying enterprise pricing anyway
Small finance team with low turnoverManual may work: but watch for security gaps in financial data access

The bottom line

Datarails forces you into enterprise pricing ($27K-88K/year) plus implementation costs ($10K-50K+) just to get SCIM, and doesn't even support Microsoft Azure. For finance teams that need automated provisioning without the enterprise premium, Stitchflow delivers managed SCIM automation at a fraction of the cost.

Make Datarails workflows AI-native

Datarails gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Microsoft Azure doesn't support SAML protocol for Datarails
  • SCIM requires token generation from admin user
  • SCIM operations run under token owner's account

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Datarails → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

DataRails available in OIN with authentication and provisioning. SCIM token generated from admin user account. SCIM operations execute under token owner's account.

Datarails gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Datarails

Datarails gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Datarails logo
Datarails
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Planful logo

Planful

No SCIM

FP&A / Financial Planning

ProvisioningNot Supported
Manual Cost$11,754/yr

Planful, the financial planning and analysis (FP&A) platform for mid-market and enterprise organizations, does not publicly document SCIM provisioning capabilities on any plan. While Planful offers SAML 2.0 SSO integration with major identity providers like Okta and Entra ID, this only handles authentication through IdP-initiated flows. The absence of documented SCIM support means IT teams managing finance and accounting users must rely on manual account provisioning and deprovisioning processes. This creates a significant operational burden for organizations using Planful for critical financial processes. Without automated provisioning, IT teams must manually coordinate with finance leadership to create accounts for new FP&A analysts, remove access when employees change roles or leave, and maintain accurate user lists across systems. Given that Planful handles sensitive financial data and planning workflows, manual processes increase both security risks and compliance challenges—especially problematic during quarterly close periods when access changes need to happen quickly.

View full guide
8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide