Stitchflow
Island logo

Island SCIM guide

Native SCIM

How to automate Island user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Island supports native SCIM 2.0 provisioning with full capabilities including user creation, deactivation, attribute sync, and group management. But SCIM is locked behind Island's Enterprise tier, which starts around $25,000/year and can reach $250,000+ for larger deployments based on AWS Marketplace pricing. For organizations evaluating Island's secure browser solution, the lack of transparent pricing makes budget planning difficult, and the Enterprise requirement creates a significant barrier to automated user management.

The pricing jump to access SCIM represents a substantial investment that may not be justified solely for provisioning capabilities. Many organizations need Island's secure browsing features across their workforce but don't require all Enterprise-tier functionality. Without automated provisioning, IT teams face manual user onboarding and offboarding processes that create security gaps and administrative overhead - particularly problematic for a security-focused tool where user access control is critical.

The strategic alternative

Island gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?No
SSO available?Yes
SSO protocolSAML 2.0
DocumentationNot available

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Island accounts manually. Here's what that costs:

Source: Stitchflow research, normalized to 500 employees:
Orphaned accounts (ex-employees with access)5
Unused licenses12
IT hours spent on manual management/year85 hours
Unused license cost/year$3,500
IT labor cost/year$5,100
Cost of compliance misses/year$890
Total annual financial impact$9,490

The Island pricing problem

Island gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
ProNot disclosed
BusinessNot disclosed
EnterpriseCustom (~$25,000+ annually)

Note: Island doesn't publish pricing for Pro or Business tiers, but all SCIM capabilities require Enterprise-level engagement with custom contracts.

What this means in practice

Unlike traditional SaaS pricing models, Island's enterprise-only approach means:

Minimum commitment: Even small teams need Enterprise contracts to access SCIM, with starting prices around $25,000/year regardless of user count.

Complex pricing: AWS Marketplace listings show contracts up to $250,000 for 12-month terms, suggesting significant cost scaling based on deployment complexity and user volume.

No predictable scaling: Without transparent per-user pricing, budgeting for team growth becomes difficult when SCIM provisioning is a hard requirement.

Additional constraints

Custom contract requirement
All Enterprise features require direct sales engagement and custom pricing negotiations.
Deployment complexity
Pricing varies significantly based on infrastructure requirements and security configurations.
No trial access
SCIM capabilities can't be tested without committing to Enterprise-level contracts.
Opaque cost structure
Without published pricing, IT teams can't budget or compare alternatives effectively.

Summary of challenges

  • Island supports SCIM but only at Enterprise tier (Custom (starting ~$25,000/year))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Island doesn't sell SCIM standalone. It requires their Enterprise plan, which starts around $25,000/year and can reach $250,000+ based on AWS Marketplace listings:

SCIM 2.0 automated provisioning
SAML single sign-on (SSO)
Enterprise browser security controls
Advanced threat protection
Zero-trust web access
Centralized policy management
Data loss prevention (DLP)
Compliance reporting and audit logs
Dedicated customer success support

Island is fundamentally an enterprise security platform, not a collaboration tool. If you need comprehensive browser-based security controls, the Enterprise plan delivers genuine value. But if you just want automated user provisioning for basic browser management, you're paying enterprise security prices for basic identity features.

Stitchflow Insight

We estimate ~80% of Island's Enterprise features are security-focused and irrelevant for teams that only need SCIM provisioning. The minimum $25,000 annual commitment reflects their enterprise security positioning, not basic identity management needs.

What IT admins are saying

Community sentiment on Island's SCIM pricing is largely shaped by sticker shock and opacity. Common complaints:

  • Enterprise-only SCIM creates massive cost barriers for smaller organizations
  • Pricing starting at ~$25,000/year puts basic provisioning out of reach
  • AWS Marketplace listings showing $250,000 contracts raise questions about true costs
  • Complete lack of transparent pricing makes budgeting nearly impossible

Island's security capabilities are impressive, but the enterprise pricing model means only large organizations can afford proper user provisioning. We're stuck with manual account management.

IT Director, Reddit

Saw the AWS listing at $250K and immediately knew this wasn't for us. Why does secure browsing require enterprise budgets?

Security Admin, Spiceworks

The recurring theme

Island's enterprise-only SCIM creates a massive accessibility gap, forcing smaller organizations to choose between advanced security features and affordable identity automation.

The decision

Your SituationRecommendation
On Pro/Business plans, need SCIMUse Stitchflow: avoid the $25K+ Enterprise jump
Enterprise too expensive for your team sizeUse Stitchflow: get SCIM without the massive price tag
Already paying for EnterpriseUse native SCIM: you're paying $25K+ anyway
Need Enterprise security features beyond SCIMEvaluate Enterprise: SCIM comes bundled with other controls
Small team, minimal user changesManual may work: but watch for security gaps as you grow

The bottom line

Island's Enterprise-only SCIM means a minimum $25,000/year commitment just to automate user provisioning. For organizations that need SCIM but can't justify Enterprise pricing, Stitchflow delivers the same provisioning automation at a fraction of the cost.

Make Island workflows AI-native

Island gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

None

Key limitations

  • Enterprise pricing not publicly disclosed
  • AWS Marketplace shows $250,000 for 12-month contract
  • Pricing varies based on number of users and deployment complexity

Documentation not available.

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Where to enable

Okta Admin Console → Applications → Island → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Island Enterprise Browser has Okta OIN app. JIT provisioning enabled by default. Full provisioning capabilities available.

Island gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Where to enable

Entra admin center → Enterprise applications → Island → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Full SCIM provisioning with Entra. Supports user creation, deactivation, attribute sync, and group provisioning.

Island gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Island

Island gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Island logo
Island
via Stitchflow

Last updated: 2026-01-20

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Alteryx logo

Alteryx

SCIM Tax
SCIM StatusIncluded
Manual Cost$9,490/yr

Alteryx supports native SCIM 2.0 provisioning, but only on Enterprise plans with custom pricing (7+ users minimum). The feature requires SSO (SAML or OIDC) to be configured first and completely overrides manual user management. For teams on Professional ($5,000/user/year) or Business ($10,000-$20,000/user/year) plans, accessing SCIM means upgrading to Enterprise - often a significant cost increase for functionality that should be table stakes. This creates a provisioning gap for most Alteryx deployments. Without automated user lifecycle management, IT teams face manual onboarding/offboarding workflows, delayed access provisioning, and compliance risks around orphaned accounts. The high per-user costs make Alteryx particularly expensive to scale, and forcing an Enterprise upgrade just for basic provisioning automation compounds that challenge.

View full guide
Atlan logo

Atlan

SCIM Tax
SCIM StatusIncluded
Manual Cost$9,490/yr

Atlan supports native SCIM 2.0 provisioning with full user and group management capabilities. However, SCIM is only available on Enterprise tier, which requires custom pricing negotiations. Additionally, SSO must be enabled before SCIM can be configured, and Atlan's pricing tiers (Starter, Premier, Enterprise) are not publicly disclosed, making cost planning difficult for IT teams. This creates a significant barrier for organizations wanting automated provisioning without committing to enterprise-level contracts. For data teams evaluating Atlan, the lack of transparent pricing means you can't budget for provisioning capabilities upfront. The SSO prerequisite also forces organizations into a specific implementation sequence that may not align with their rollout timeline.

View full guide
Benchling logo

Benchling

SCIM Tax
SCIM StatusIncluded
Manual Cost$9,490/yr

Benchling supports SCIM provisioning, but only on Enterprise plans with custom pricing that typically starts at $1M+ annually. This creates a massive barrier: organizations on Professional plans ($20,000+/year) face a 50x+ price increase to unlock automated user provisioning. Even mid-sized life sciences teams end up paying enterprise-level licensing just to automate basic user lifecycle management. The pricing gap is so extreme that most organizations either stick with manual provisioning or delay Benchling adoption entirely. This creates a significant operational burden for IT teams managing researchers across multiple lab environments. Manual user provisioning in a platform that handles sensitive R&D data introduces compliance risks and delays researcher onboarding. When a scientist joins or leaves, IT must manually coordinate access across Benchling's complex permission structure for notebooks, entities, and workflows. For organizations with frequent collaborator access or seasonal research teams, this becomes unmanageable.

View full guide