Holistics SCIM guide

Looker (Google Cloud) does not offer native SCIM provisioning support on any plan. While a community-developed SCIM proxy (looker-scim-proxy) exists on GitHub, Google Cloud explicitly does not provide support for this tool, making it unsuitable for production environments where reliability and vendor accountability are critical. Organizations must rely on Google Cloud Identity integration for user management, which creates a dependency on Google's ecosystem and limits flexibility for companies using other identity providers as their primary source of truth. This creates a significant operational gap for IT teams managing analytics access. Without native SCIM, user provisioning requires manual intervention every time analysts, data engineers, or business users need access to dashboards and data models. Since Looker pricing starts around $84,000-$120,000 annually for 50-100 users, the lack of automated provisioning means expensive per-seat licenses often remain active longer than necessary when employees leave or change roles, driving up already substantial costs.

Metabase supports SCIM 2.0 for automated user provisioning, but only on Pro ($500/month for 10 users) or Enterprise ($15,000/year minimum) plans. While Okta integration includes full user and group provisioning, Microsoft Entra ID SCIM is limited to users only—no group sync capability. For teams on Starter plans ($5/user/month), upgrading to Pro means jumping to $500/month base cost plus $10 per additional user, a significant expense increase just to unlock provisioning automation. The Entra ID limitation creates a particular operational gap for data teams. Without group provisioning, IT admins must manually manage dashboard permissions and data access controls in Metabase, defeating much of the automation benefit. This becomes especially problematic as organizations scale their BI initiatives across departments, where group-based access control is essential for maintaining data governance and compliance.

6sense, the B2B revenue intelligence platform, has paused SCIM provisioning for new customers until Q4 2026. While existing customers with SCIM enabled can continue using it, new implementations are limited to JIT (Just-In-Time) provisioning through SAML SSO. This creates a significant gap for IT teams managing revenue intelligence access, as JIT only creates users on first login and provides minimal attribute mapping (email, first name, last name only). For an enterprise platform with typical pricing of $55,000-$130,000 annually, the absence of automated user lifecycle management is a substantial limitation. The lack of SCIM until Q4 2026 forces IT teams into manual provisioning workflows for a platform handling sensitive revenue data. While SAML SSO handles authentication, it doesn't address user lifecycle events like role changes, department transfers, or offboarding. This creates compliance risks in revenue teams where access to prospect data and sales intelligence must be tightly controlled. The nearly two-year wait for SCIM restoration means organizations implementing 6sense today face manual user management for the foreseeable future.