Summary and recommendation
Island supports native SCIM 2.0 provisioning with full capabilities including user creation, deactivation, attribute sync, and group management. But SCIM is locked behind Island's Enterprise tier, which starts around $25,000/year and can reach $250,000+ for larger deployments based on AWS Marketplace pricing. For organizations evaluating Island's secure browser solution, the lack of transparent pricing makes budget planning difficult, and the Enterprise requirement creates a significant barrier to automated user management.
The pricing jump to access SCIM represents a substantial investment that may not be justified solely for provisioning capabilities. Many organizations need Island's secure browsing features across their workforce but don't require all Enterprise-tier functionality. Without automated provisioning, IT teams face manual user onboarding and offboarding processes that create security gaps and administrative overhead - particularly problematic for a security-focused tool where user access control is critical.
The strategic alternative
Island gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Island accounts manually. Here's what that costs:
The Island pricing problem
Island gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Pro | Not disclosed | ||
| Business | Not disclosed | ||
| Enterprise | Custom (~$25,000+ annually) |
Note: Island doesn't publish pricing for Pro or Business tiers, but all SCIM capabilities require Enterprise-level engagement with custom contracts.
What this means in practice
Unlike traditional SaaS pricing models, Island's enterprise-only approach means:
Minimum commitment: Even small teams need Enterprise contracts to access SCIM, with starting prices around $25,000/year regardless of user count.
Complex pricing: AWS Marketplace listings show contracts up to $250,000 for 12-month terms, suggesting significant cost scaling based on deployment complexity and user volume.
No predictable scaling: Without transparent per-user pricing, budgeting for team growth becomes difficult when SCIM provisioning is a hard requirement.
Additional constraints
Summary of challenges
- Island supports SCIM but only at Enterprise tier (Custom (starting ~$25,000/year))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Island doesn't sell SCIM standalone. It requires their Enterprise plan, which starts around $25,000/year and can reach $250,000+ based on AWS Marketplace listings:
Island is fundamentally an enterprise security platform, not a collaboration tool. If you need comprehensive browser-based security controls, the Enterprise plan delivers genuine value. But if you just want automated user provisioning for basic browser management, you're paying enterprise security prices for basic identity features.
Stitchflow Insight
We estimate ~80% of Island's Enterprise features are security-focused and irrelevant for teams that only need SCIM provisioning. The minimum $25,000 annual commitment reflects their enterprise security positioning, not basic identity management needs.
What IT admins are saying
Community sentiment on Island's SCIM pricing is largely shaped by sticker shock and opacity. Common complaints:
- Enterprise-only SCIM creates massive cost barriers for smaller organizations
- Pricing starting at ~$25,000/year puts basic provisioning out of reach
- AWS Marketplace listings showing $250,000 contracts raise questions about true costs
- Complete lack of transparent pricing makes budgeting nearly impossible
Island's security capabilities are impressive, but the enterprise pricing model means only large organizations can afford proper user provisioning. We're stuck with manual account management.
Saw the AWS listing at $250K and immediately knew this wasn't for us. Why does secure browsing require enterprise budgets?
The recurring theme
Island's enterprise-only SCIM creates a massive accessibility gap, forcing smaller organizations to choose between advanced security features and affordable identity automation.
The decision
| Your Situation | Recommendation |
|---|---|
| On Pro/Business plans, need SCIM | Use Stitchflow: avoid the $25K+ Enterprise jump |
| Enterprise too expensive for your team size | Use Stitchflow: get SCIM without the massive price tag |
| Already paying for Enterprise | Use native SCIM: you're paying $25K+ anyway |
| Need Enterprise security features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with other controls |
| Small team, minimal user changes | Manual may work: but watch for security gaps as you grow |
The bottom line
Island gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the Island workflow gap
Island gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
None
Key limitations
- Enterprise pricing not publicly disclosed
- AWS Marketplace shows $250,000 for 12-month contract
- Pricing varies based on number of users and deployment complexity
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Docs
Island Enterprise Browser has Okta OIN app. JIT provisioning enabled by default. Full provisioning capabilities available.
Island gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Full SCIM provisioning with Entra. Supports user creation, deactivation, attribute sync, and group provisioning.
Island gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the workflow gap in
Island
Island gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.
Start with the free gap diagnostic
