Summary and recommendation
Greenhouse supports SCIM provisioning, but only on Advanced or Expert tiers (starting around $6,000/year, quote-based). The bigger issue: Greenhouse's SCIM implementation only provisions users—not groups—meaning you lose the organizational structure and permission inheritance that makes identity management scalable. Additionally, you cannot fully delete users via SCIM (only deactivate), and Azure Entra users face a 40-minute sync delay.
For recruiting teams managing hiring managers, interviewers, and HR staff across different departments and access levels, the lack of group provisioning creates a significant operational burden. You're forced to manually assign permissions and manage access changes for every user individually. With recruiting involving sensitive candidate data and frequent access changes during hiring cycles, this manual overhead increases both security risk and administrative workload.
The strategic alternative
Stitchflow provides SCIM-level provisioning through resilient browser automation for Greenhouse that works with any plan tier, including proper group management and real-time sync capabilities. Flat pricing under $5K/year, regardless of team size or Greenhouse subscription level.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Custom |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Greenhouse accounts manually. Here's what that costs:
The Greenhouse pricing problem
Greenhouse gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Essential | ~$6,000-$10,000/year (quote-based) | ||
| Advanced | Quote-based (mid-market) | ||
| Expert | Quote-based (enterprise) |
Note: All Greenhouse pricing is quote-based, typically ranging from $6,000-$70,000/year depending on company size and features. SCIM is only available on Advanced or Expert tiers.
What this means in practice
Since Greenhouse uses custom pricing, the SCIM upgrade cost varies significantly by organization size:
The quote-based model means you won't know the true cost until deep in the sales process.
Additional constraints
Summary of challenges
- Greenhouse supports SCIM but only at Custom tier (custom pricing)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Greenhouse doesn't sell SCIM separately. It's bundled with Advanced or Expert tier subscriptions that include enterprise recruiting features:
The SCIM implementation has notable restrictions: you can only provision users (no group management), cannot fully delete users through SCIM (deactivation only), and Azure Entra users face 40-minute sync delays.
Stitchflow Insight
If your recruiting team needs advanced workflows and reporting anyway, the upgrade delivers value. But if you just want automated user provisioning, you're paying $6,000-$70,000/year for recruiting platform features you likely won't use. We estimate ~60% of Advanced/Expert features are irrelevant for teams that only need identity automation.
What IT admins are saying
Community sentiment on Greenhouse's SCIM limitations centers around incomplete provisioning functionality. Common complaints:
- No group provisioning support - users must be individually managed
- 40-minute sync delays with Azure Entra ID creating access gaps
- Cannot delete users through SCIM, only deactivate them
- Requirement to configure SSO before SCIM adds implementation complexity
The fact that SCIM only handles user provisioning and not groups means we're still doing manual role assignments for every new hire.
40-minute sync intervals with Azure are painful when you need immediate access for new recruiters starting client calls.
The recurring theme
Greenhouse's SCIM feels half-built, forcing IT teams into hybrid manual processes despite paying for enterprise-tier automation.
The decision
| Your Situation | Recommendation |
|---|---|
| On Essential plan, need SCIM | Use Stitchflow: avoid the $6K+ tier jump to Advanced |
| On Advanced/Expert but hit user-only SCIM limits | Use Stitchflow: get group provisioning native SCIM can't do |
| Using Azure Entra, frustrated by 40-minute sync delays | Use Stitchflow: get real-time provisioning |
| Already on Advanced/Expert with working SCIM | Use native SCIM: you're paying for it |
| Small recruiting team, low hiring volume | Manual may work: but watch for security gaps with candidate data |
The bottom line
Greenhouse's SCIM requires Advanced or Expert tiers (starting at $6K+/year) and only provisions users—not groups. For teams needing full provisioning automation without the tier upgrade or user-only limitations, Stitchflow delivers complete SCIM functionality at flat pricing under $5K/year.
Automate Greenhouse without the tier upgrade
Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Greenhouse at <$5K/year, flat, regardless of team size.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Custom
Prerequisites
SSO must be configured first
Key limitations
- SCIM only provisions users - NOT groups
- Cannot delete users via SCIM (only deactivate)
- Azure Entra has 40-minute sync interval
- SSO must be configured before SCIM
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Full SCIM 2.0 provisioning. User provisioning only (not groups). SSO must be configured before SCIM. Schema discovery and attribute writeback supported.
Native SCIM is available on Custom. Use Stitchflow if you need provisioning without the tier upgrade.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
SCIM provisioning with 40-minute sync interval. User provisioning only. Cannot delete users via SCIM (only deactivate).
Native SCIM is available on Custom. Use Stitchflow if you need provisioning without the tier upgrade.
Unlock SCIM for
Greenhouse
Greenhouse gates automation behind Advanced or Expert plan. Stitchflow delivers the same SCIM outcomes for a flat fee.
See how it works
