Stitchflow
Dynatrace logo

Dynatrace SCIM guide

Native SCIM

How to automate Dynatrace user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Dynatrace supports SCIM 2.0 for automated user provisioning, but only on its Enterprise plan with consumption-based pricing starting around $69/user/month and typical minimum commitments of $2,000+/month. While the SCIM implementation is robust (supporting user lifecycle management, group sync, and proper deactivation), it requires DNS domain verification before setup and has some quirks like 40-minute sync delays with Azure AD and separate SCIM/SAML group handling.

For platform teams managing observability access across development environments, the Enterprise pricing barrier is significant. A 50-person team faces $41,400/year minimum just for the licensing, often to access SCIM features they need for compliance but may not require the full Enterprise feature set. The domain verification requirement also adds deployment friction that delays rollouts.

The strategic alternative

Dynatrace gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Dynatrace accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Dynatrace pricing problem

Dynatrace gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Free Trial15 days
SaaS StandardDPS consumption-based
SaaS EnterpriseCustom (typically $2,000+/month minimum)

Note: Dynatrace uses consumption-based pricing starting at ~$0.08/hour per 8 GiB host for Full-Stack Monitoring, with additional charges for infrastructure monitoring and log management.

What this means in practice

Unlike per-user pricing, Dynatrace's consumption model makes it difficult to predict the true cost of Enterprise access:

Typical scenarios

Small team (5-10 DevOps engineers)
Still requires $24,000+/year minimum commitment
Growing monitoring needs
Costs scale with infrastructure, not user count
Multi-environment setups
Each environment adds to consumption costs

The pricing model creates a significant barrier since organizations pay for monitoring capacity regardless of how many users need provisioning access.

Additional constraints

Domain verification required
Must complete DNS TXT record verification before enabling SCIM, adding deployment complexity.
Azure sync delays
Entra ID synchronization occurs every ~40 minutes, creating delays for urgent access changes.
Separate group management
SCIM groups operate independently from SAML groups, requiring careful coordination of permissions.
Consumption unpredictability
DPS pricing makes it difficult to budget for the Enterprise tier needed for SCIM access.

Summary of challenges

  • Dynatrace supports SCIM but only at Enterprise tier (Custom (DPS consumption-based, ~$69/user/month starting, $2000+/month minimum commitment typical))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Dynatrace doesn't sell SCIM à la carte. It's bundled with SaaS Enterprise features on their consumption-based DPS (Dynatrace Platform Subscription) model:

SCIM 2.0 automated provisioning with full user lifecycle management
SAML 2.0 single sign-on (SSO)
Advanced user and group management across environments
Custom roles and granular permissions
Enhanced security controls and audit logging
Priority support and professional services
Advanced observability features (synthetic monitoring, session replay, etc.)

The challenge with Dynatrace's Enterprise requirement is the consumption-based pricing model. You're not just paying for identity features—you're committing to their full observability platform at enterprise scale (~$69/user/month with typical $2000+/month minimums). If your primary need is automated provisioning for your existing Dynatrace deployment, you're paying for platform capabilities you may already have sized appropriately.

Stitchflow Insight

We estimate ~80% of Enterprise DPS features are observability-focused rather than identity-focused, making this an expensive path for teams that simply want to automate user management on their current Dynatrace instance.

What IT admins are saying

Community sentiment on Dynatrace's SCIM implementation is mixed, with administrators appreciating the functionality but frustrated by access barriers and complexity. Common complaints:

  • Enterprise plan requirement creates a high barrier to entry for SCIM automation
  • DNS domain verification requirement adds unnecessary setup complexity
  • Azure sync delays (~40 minutes) create provisioning lag that impacts onboarding
  • Separate SCIM and SAML group management creates administrative overhead

The domain verification step via DNS TXT records is an extra hurdle that most other platforms don't require - adds time to what should be a straightforward SCIM setup.

DevOps Engineer, Reddit

We're paying enterprise prices just to get basic user provisioning automated. The consumption model already makes this expensive enough.

Platform Team Lead, Community Forum

The recurring theme

While Dynatrace offers robust SCIM functionality, the enterprise pricing gate and complex setup requirements create friction for teams who just want automated user management.

The decision

Your SituationRecommendation
Need SCIM but not on Enterprise tierUse Stitchflow: avoid the $2K+/month minimum commitment
On Enterprise, domain verification is blocking youUse Stitchflow: bypass DNS requirements and 40-minute sync delays
Want SCIM + SAML without complexityUse native: Enterprise includes both with full integration
Already paying Enterprise minimum commitmentUse native SCIM: you're already paying for it
Small DevOps team, low turnoverManual may work: but monitor for environment access gaps

The bottom line

Dynatrace gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Make Dynatrace workflows AI-native

Dynatrace gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Domain verification via DNS TXT record required
  • Azure sync every ~40 minutes
  • SCIM groups are separate from SAML groups

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Dynatrace → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Full SCIM 2.0 support. Can use SCIM 2.0 Test App (Header Auth) or OAuth Bearer Token. Supports create, update, deactivate users and groups.

Dynatrace gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Dynatrace → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Azure sync every ~40 minutes. Supports user and group provisioning. JIT provisioning enabled by default.

Dynatrace gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Dynatrace

Dynatrace gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Dynatrace logo
Dynatrace
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

New Relic logo

New Relic

SCIM Tax

Observability / APM

SCIM StatusIncluded
Manual Cost$11,754/yr

New Relic offers robust SCIM 2.0 support that automates user creation, updates, deactivation, and group synchronization. However, SCIM requires upgrading to Pro ($349/user/year for full platform access) or Enterprise plans. More critically, enabling SCIM is irreversible—once you turn it on for an authentication domain, you cannot revert to manual user management, forcing permanent dependency on your identity provider for all user lifecycle operations. This irreversible commitment creates operational risk. If your SCIM integration breaks or you need to temporarily manage users manually, you're locked out of those options. For organizations evaluating New Relic or considering SCIM enablement, this permanent change means you must be certain about your long-term identity management strategy before proceeding.

View full guide
8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide