Stitchflow
Fivetran logo

Fivetran SCIM guide

Native SCIM

How to automate Fivetran user provisioning, and what it actually costs

Native SCIM requires Enterprise / Business Critical plan

Summary and recommendation

Fivetran supports SCIM (the protocol that lets your identity provider automatically create, update, and remove user accounts). But Fivetran restricts SCIM to its Enterprise or Business Critical plans, which start at $12K/year minimum commitment—a substantial jump from their Standard plan that offers unlimited users with usage-based pricing.

The gap is significant. While SSO/SAML works on all Fivetran plans, new users joining via just-in-time provisioning arrive with zero permissions. Without SCIM automation, IT teams must manually assign roles for every data engineer, analyst, and BI user—a tedious process that scales poorly as data teams grow. Given Fivetran's role as a central data integration hub, this manual overhead creates bottlenecks for data access and increases security risk from over-provisioned accounts.

The strategic alternative

Fivetran gates SCIM behind Enterprise / Business Critical. Skip the Enterprise / Business Critical plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OIDC
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Fivetran accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Fivetran pricing problem

Fivetran gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure (Usage-Based + Features)

PlanPriceSSOSCIM
StandardUsage-based, unlimited users
EnterpriseUsage-based + advanced features
Business Critical$12K/year minimum commitment

Note: March 2025 pricing change switches to per-connection MAR calculation, typically increasing costs 40-70% for multi-connector setups. Annual costs range from $10K-$500K+ depending on data volume.

What this means in practice

Without SCIM on lower tiers, new users provisioned via JIT (Just-In-Time) SSO are created with zero permissions. This creates a manual bottleneck where IT admins must:

Manually assign connector access for each new data engineer
Configure destination permissions individually
Handle role assignments for analysts and BI teams
Manage team-based access to specific data sources

For data teams where connector access determines what sources users can sync, this manual process significantly delays onboarding and creates ongoing administrative overhead.

Additional constraints

High minimum commitment
Business Critical tier requires $12K/year minimum, regardless of actual usage.
Complex pricing calculation
MAR (Monthly Active Rows) pricing varies dramatically based on data volume and connector count.
Role assignment gaps
Even with SCIM enabled, team roles and connector-specific permissions often require manual configuration.
Enterprise dependency
Browser session timeouts and advanced governance features also locked behind Enterprise/Business Critical tiers.

Summary of challenges

  • Fivetran supports SCIM but only at Enterprise tier (Business Critical (highest tier) - $12K/year minimum commitment)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Fivetran doesn't sell SCIM separately. It's bundled with Enterprise/Business Critical tier features:

SCIM automated provisioning and role assignment
Advanced browser session timeout controls
Enhanced security and compliance features
Priority support and SLA guarantees
Advanced data governance tools
Custom connector development support
Dedicated customer success management

Stitchflow Insight

The $12K minimum annual commitment gets you enterprise-grade data platform features, but if you just need automated user provisioning for your data team, you're paying for extensive platform capabilities you likely won't use. We estimate ~60% of Enterprise/Business Critical features are irrelevant for organizations that primarily need SCIM to automate connector permissions and user lifecycle management.

What IT admins are saying

Community sentiment on Fivetran's SCIM restrictions reveals frustration with enterprise-only gatekeeping. Common complaints:

  • SCIM locked behind Enterprise/Business Critical plans ($12K+ minimum)
  • Without SCIM, new JIT users get zero permissions by default
  • Manual role assignment becomes a bottleneck for data teams
  • Major pricing overhaul in March 2025 causing 40-70% cost increases

New users created through JIT provisioning have no permissions if SCIM isn't enabled. So you're stuck doing manual role assignments for every data engineer.

Reddit r/dataengineering

The Enterprise plan requirement for SCIM is rough when you just need basic user automation. We're paying for features we'll never use.

Fivetran Community Forum

The recurring theme

Fivetran forces teams into expensive enterprise tiers just to avoid manual user management, creating a costly barrier for automated provisioning in data teams.

The decision

Your SituationRecommendation
On Standard plan, need SCIMUse Stitchflow: avoid the $12K/year minimum commitment jump
Need automated provisioning but not Enterprise featuresUse Stitchflow: build complete workflows across every app in less than a week (~2 hours of your time).
Already on Business Critical planUse native SCIM: you're paying for it
Heavy data volume with Enterprise budgetEvaluate Business Critical: SCIM comes bundled with advanced features
Small data team, infrequent user changesManual may work: but monitor for permission gaps as team grows

The bottom line

Fivetran's SCIM requires their highest-tier Business Critical plan with a $12K/year minimum commitment. For data teams that need automated provisioning without the enterprise-level investment, Stitchflow delivers the same automation at a fraction of the cost.

Make Fivetran workflows AI-native

Fivetran gates SCIM behind Enterprise / Business Critical. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise / Business Critical upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • New JIT users created with no permissions if SCIM not enabled
  • Browser session timeout requires Enterprise/Business Critical plan
  • Manual role assignment needed without SCIM

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Fivetran → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Create, update, deactivate users via SCIM. Account Administrator role required. SCIM disables direct user management in Fivetran. Team roles not configurable via SCIM.

Fivetran gates SCIM behind Enterprise / Business Critical. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Fivetran → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Enterprise/Business Critical required. Create non-gallery app with custom roles matching Fivetran RBAC. Destination/connection-level roles not supported via SCIM.

Fivetran gates SCIM behind Enterprise / Business Critical. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Fivetran

Fivetran gates SCIM behind Enterprise / Business Critical plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Fivetran logo
Fivetran
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide