Heap SCIM guide

Amplitude supports SCIM provisioning, but only on Growth plans (starting around $36K/year) or Enterprise plans with custom pricing. While Amplitude's SCIM implementation covers the core functionality—creating, updating, and deactivating users—it requires SCIM to be specifically enabled for your organization, and regenerating the SCIM key immediately invalidates existing integrations without warning. For product teams on Plus plans ($49/month), upgrading to Growth just to unlock SCIM means jumping from under $600/year to $36,000+/year—a 60x increase. That's often more than the entire analytics budget for smaller product teams. The gap becomes particularly problematic for cross-functional product teams where analysts, PMs, and engineers need varying levels of access to user behavior data, but manual provisioning creates security risks around sensitive analytics permissions.

Mixpanel supports SCIM (the protocol that lets your identity provider automatically create, update, and remove user accounts). But Mixpanel gates SCIM behind its Enterprise plan, which starts at $10,000/year and can reach $200,000+ depending on event volume. For product analytics, this creates a significant barrier since teams often start with Growth plans ($20/month base) but need Enterprise-level security controls as they scale. This pricing structure forces growing companies into an uncomfortable choice: either manage Mixpanel users manually (creating compliance gaps for sensitive product data) or pay Enterprise prices before they're ready. SSO alone doesn't solve the provisioning problem - you still need to manually grant project-level permissions and manage role assignments for product managers, analysts, and engineers accessing user behavior data.

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.