Stitchflow
Five9 logo

Five9 SCIM guide

Native SCIM

How to automate Five9 user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Five9 supports SCIM through its Identity Service 2.0, but only on Enterprise plans (Optimum/Ultimate at $199-299/agent/month). The lower-tier plans (Digital, Core, Premium at $149-169/agent/month) are locked out of automated provisioning entirely. For contact centers, this creates a significant cost barrier—a 100-agent operation would pay $19,900-29,900/month for Enterprise just to unlock SCIM, versus $14,900-16,900/month for basic plans.

The bigger issue is Five9's Identity Service 2.0 is still in "Controlled Availability," meaning limited rollout and potential feature gaps. Contact centers can't afford provisioning delays when agents need immediate access to queues, campaigns, and skill assignments. Manual user management becomes a bottleneck that directly impacts customer service operations and agent productivity.

The strategic alternative

Five9 gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Five9 accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Five9 pricing problem

Five9 gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Digital$149/agent/mo
Core$149/agent/mo
Premium$169/agent/mo
Optimum$199/agent/mo
Ultimate$229-299/agent/mo

Plan Structure (Per Agent, Monthly)

PlanPriceSCIM
Digital$149/agent/mo
Core$149/agent/mo
Premium$169/agent/mo
Optimum$199/agent/mo
Ultimate$229-299/agent/mo

Note: Five9's SCIM is part of their Identity Service 2.0, which includes automated skill assignment through "Circles" - a key differentiator for contact center provisioning.

What this means in practice

Using current list prices (Premium → Optimum for SCIM access):

Contact Center SizeAnnual Upgrade Cost
25 agents+$9,000/year
50 agents+$18,000/year
100 agents+$36,000/year
200 agents+$72,000/year

Calculation: ($199 - $169) × agents × 12 months (minimum upgrade path)

Additional constraints

Controlled Availability
Five9 Identity Service 2.0 is still in limited release, not generally available to all Enterprise customers.
Custom pricing
Optimum and Ultimate tiers require sales engagement and custom quotes, adding complexity to procurement.
Contact center minimums
Five9 typically enforces minimum seat commitments, especially for Enterprise features.
Federation requirements
SCIM users must use Federation ID for SSO, adding identity architecture complexity.

Summary of challenges

  • Five9 supports SCIM but only at Enterprise tier ($199-299/agent/month (Optimum/Ultimate) - contact sales for custom quote)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Five9 doesn't sell SCIM standalone. It's bundled with Enterprise-tier features starting at $199-299/agent/month:

Five9 Identity Service 2.0 with SCIM provisioning
Circles automated skill and application assignment
SAML single sign-on (SSO)
Advanced workforce management tools
Enhanced reporting and analytics
Quality management features
Dedicated customer success management
Priority support and professional services

The Five9 Identity Service 2.0 is currently in Controlled Availability, meaning limited rollout to select customers. Even when you upgrade to Enterprise, you may need to request access to the SCIM functionality.

Stitchflow Insight

If you need advanced contact center features anyway, the Enterprise upgrade delivers value. But if you just want automated user provisioning for agents, you're paying $50-150+ more per seat monthly for workforce optimization tools you may not use. We estimate ~60% of Enterprise features are irrelevant for teams that only need SCIM automation.

What IT admins are saying

Community sentiment on Five9's SCIM implementation is cautiously optimistic but frustrated by access barriers. Common complaints:

  • Enterprise tier requirement creating a massive cost jump from Premium at $169/month
  • Five9 Identity Service 2.0 still in "Controlled Availability" with limited access
  • Complex setup requiring Federation ID configuration for SSO users
  • Uncertainty about when Circles feature will be fully available for automated skill assignments

The Identity Service 2.0 looks promising for automating agent provisioning, but being in controlled availability means we can't actually use it yet.

Contact Center Technology Forum

We're paying $199+ per agent just to get SCIM when we were fine with Premium at $169. That's a 17% increase across our entire agent population.

Five9 Community

The recurring theme

Five9's advanced identity features are locked behind expensive Enterprise tiers and controlled rollouts, forcing contact centers to either pay significantly more or wait indefinitely for basic provisioning automation.

The decision

Your SituationRecommendation
On Core/Premium plans, need SCIMUse Stitchflow: avoid the $50-130/agent/month Enterprise upgrade
Already on Optimum/Ultimate with Identity Service 2.0Use native SCIM: you're paying for advanced provisioning features
Need Circles for automated skill assignmentsEvaluate Enterprise: Five9's native solution handles complex agent provisioning
Small contact center, stable agent rosterManual may work: but monitor for compliance gaps during agent turnover
Identity Service 2.0 still in Controlled AvailabilityUse Stitchflow: get immediate SCIM without waiting for feature rollout

The bottom line

Five9 gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Make Five9 workflows AI-native

Five9 gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Five9 Identity Service 2.0 in Controlled Availability
  • Circles feature for automated skill/app assignment
  • Federation ID required for SSO users

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Five9 → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Five9 Identity Service based SSO app in OIN. Supports SAML SSO and SCIM provisioning. Schema discovery, attribute writeback supported. Also Aquera connector available.

Five9 gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Five9 → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Five9 Automated User Management (AUM) combines SCIM + Circles for skills/app assignment. Official Five9 docs for Entra ID SCIM configuration. IDP initiated SSO supported.

Five9 gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Five9

Five9 gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade, avoiding a 34% markup.

See how it works
Admin Console
Directory
Applications
Five9 logo
Five9
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Genesys Cloud logo

Genesys Cloud

SCIM Tax

Contact Center / CCaaS

SCIM StatusIncluded
Manual Cost$11,754/yr

Genesys Cloud supports native SCIM 2.0 provisioning across all plans (when paired with SSO), with full integration for Okta, Azure AD, and ADFS. However, the implementation has a critical limitation: it's strictly unidirectional sync from your IdP to Genesys Cloud. Any changes made directly in Genesys—whether by admins configuring agent skills, supervisors adjusting queue memberships, or workforce managers updating schedule groups—will be overwritten on the next sync cycle. This creates operational friction for contact center teams who need to manage agent-specific configurations within Genesys Cloud. The platform's strength in contact center management becomes a weakness when every local change risks being reverted by your identity provider. Additionally, SCIM cannot create or delete groups—it only manages membership of pre-existing groups with matching names, limiting your organizational flexibility.

View full guide
NICE CXone logo

NICE CXone

SCIM Tax

Contact Center / CCaaS

SCIM Tax+251%
Manual Cost$11,754/yr

NICE CXone supports native SCIM provisioning, but only for users on Enterprise-tier plans ($135-$249/user/month). The implementation requires navigating regional SCIM endpoints (na1, eu, etc.), OAuth 2 authentication setup, and coordination with NICE's support team for SAML configuration. While SCIM can create, update, and deactivate users, it's limited to SP-initiated SSO and requires users to have Agent roles for provisioning to work properly. For contact centers on lower-tier plans (Digital Agent at $71/user/month or Voice Agent at $94/user/month), this creates a significant gap. These organizations still need automated user lifecycle management—agents frequently onboard, transfer between teams, or leave—but upgrading to Enterprise just for SCIM nearly doubles licensing costs. A 50-agent contact center would pay an additional $96,000/year moving from Voice Agent to Essential Suite solely to unlock provisioning automation.

View full guide
Talkdesk logo

Talkdesk

SCIM Tax

Contact Center / CCaaS

SCIM StatusIncluded
Manual Cost$11,754/yr

Talkdesk supports SCIM 2.0 for user provisioning across all pricing tiers, starting at $85/user/month for CX Cloud Essentials. However, SCIM implementation isn't publicly documented, forcing IT teams to work directly with Talkdesk support for setup and troubleshooting. This creates deployment friction and ongoing maintenance challenges, especially for organizations that need reliable, self-service provisioning workflows. The lack of public SCIM documentation means you're dependent on Talkdesk's support team for configuration guidance, API changes, and troubleshooting. For contact centers managing hundreds of agents with frequent turnover, this dependency can slow onboarding and create compliance gaps when user access isn't provisioned or deprovisioned promptly.

View full guide