Height SCIM guide

Basecamp offers automated user provisioning only through Okta's connector, which uses a proprietary API rather than the standard SCIM 2.0 protocol. This integration is available with Basecamp's Business plan ($299/month flat rate for unlimited users), but creates significant limitations for IT teams: you're locked into Okta as your identity provider, with no native SCIM support for Entra ID, Google Workspace, or other platforms. While Basecamp does support SAML SSO across multiple IdPs, SSO alone only handles authentication—users must still be manually created and managed in Basecamp. This creates a problematic gap for organizations using non-Okta identity providers or those requiring standardized SCIM implementations. IT teams end up managing Basecamp users manually or through custom scripts, increasing operational overhead and compliance risk. The lack of true SCIM 2.0 support means you can't leverage your existing provisioning workflows or easily switch identity providers without losing automation capabilities.

Hive supports SCIM 2.0 provisioning with Okta, but only after purchasing the Enterprise Security Add-on on top of an Enterprise plan. This means teams on Starter ($5/user/month) or Teams ($12/user/month) plans must upgrade to custom Enterprise pricing plus pay for the Security Add-on—potentially increasing costs by 5-10x just to unlock automated user provisioning. Additionally, ADFS users get SSO but no auto-deprovisioning, creating a manual offboarding burden. For project management platforms like Hive where team composition changes frequently, manual user management becomes a significant administrative burden. Teams launch new projects, contractors join temporarily, and employees shift between initiatives—all requiring manual account creation and cleanup. Without automated provisioning, IT teams spend hours managing Hive accounts that should be handled automatically through your identity provider.

Nifty, the project management platform, does not support SCIM provisioning on any plan tier. While Nifty offers SSO integration (Google SSO on Pro plans, Microsoft SSO on Business plans, and custom SAML 2.0 on Enterprise plans), these authentication solutions don't address user lifecycle management. IT teams must manually create, update, and deactivate user accounts across all Nifty workspaces, creating operational overhead that scales poorly as project teams grow and change. This manual provisioning approach creates significant compliance and security risks for organizations managing multiple projects with rotating team members. Without automated deprovisioning, departed employees may retain access to sensitive project data, timelines, and client information. For agencies and consulting firms that frequently onboard and offboard team members based on project needs, the lack of SCIM provisioning turns user management into a time-consuming administrative burden that increases the risk of access control failures.