Stitchflow
Lightstep logo

Lightstep SCIM guide

Native SCIM

How to automate Lightstep user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Lightstep supports native SCIM provisioning through Okta for user lifecycle management on Enterprise plans. However, the product presents a unique challenge: Lightstep was renamed to ServiceNow Cloud Observability in August 2023 and is being sunset after March 1, 2026. Additionally, SCIM provisioning is only documented for Okta integration, leaving Microsoft Entra ID and Google Workspace customers without automated provisioning options despite SSO support.

The sunsetting timeline creates an immediate problem for IT teams who need consistent user provisioning during their migration to alternative observability platforms. Organizations stuck with Lightstep until the March 2026 deadline still need proper access governance, but investing in Enterprise tier upgrades for a dying product doesn't make financial sense. Meanwhile, teams using non-Okta identity providers face manual user management for the remainder of Lightstep's lifecycle.

The strategic alternative

Lightstep gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?No
SSO available?Yes
SSO protocolSAML 2.0
DocumentationNot available

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDSSO only
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Lightstep accounts manually. Here's what that costs:

Source: Stitchflow research, normalized to 500 employees:
Orphaned accounts (ex-employees with access)5
Unused licenses12
IT hours spent on manual management/year85 hours
Unused license cost/year$3,500
IT labor cost/year$5,100
Cost of compliance misses/year$890
Total annual financial impact$9,490

The Lightstep pricing problem

Lightstep gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Standard$984/year (starting)
EnterpriseCustom pricing

Plan Structure

PlanPriceSCIM
Standard$984/year (starting)
EnterpriseCustom pricing

Note: Lightstep was acquired by ServiceNow in 2021 and rebranded as ServiceNow Cloud Observability in August 2023. The original Lightstep product will be discontinued after March 1, 2026.

What this means in practice

Organizations face a difficult decision matrix:

For new implementations: Investing in SCIM integration setup, testing, and user training for a platform with less than 14 months of remaining life creates negative ROI on automation efforts.

For existing customers: Current SCIM integrations will require migration planning to alternative observability platforms, effectively doubling the integration work (current state + future state).

Migration complexity: User provisioning configurations, role mappings, and group assignments will need complete rebuilding on replacement platforms, many of which may lack comparable SCIM support.

Additional constraints

Limited IdP support
SCIM provisioning is primarily documented for Okta integration only, creating vendor lock-in concerns during the transition period.
Migration timeline pressure
The March 2026 sunset date creates compressed timelines for SCIM re-implementation on replacement platforms.
ServiceNow ecosystem tie-in
Organizations using broader ServiceNow tooling may face additional migration complexity beyond just the observability platform.
Custom Enterprise pricing
SCIM access requires navigating custom Enterprise pricing discussions for a product with a known expiration date.

Summary of challenges

  • Lightstep supports SCIM but only at Enterprise tier (Custom)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Lightstep doesn't sell SCIM à la carte. It's bundled with Enterprise features, though the product is being sunset after March 1, 2026:

SCIM automated provisioning (Okta only)
SAML single sign-on (SSO)
Enterprise security controls
Advanced monitoring capabilities
Custom retention policies
Dedicated support channels
Professional services access

Important caveat: Lightstep was renamed to ServiceNow Cloud Observability in August 2023 and is being discontinued. If you're evaluating identity management for this platform, consider migration timelines and alternative observability solutions.

Stitchflow Insight

The Enterprise tier bundles observability features with identity controls. If you're planning to migrate away from this platform anyway, paying for Enterprise just to get SCIM provisioning for a few months makes little financial sense. We estimate ~80% of Enterprise features become irrelevant once you're planning your exit strategy.

What IT admins are saying

Community sentiment on Lightstep's SCIM situation reflects frustration with the product's uncertain future. Common complaints:

  • Enterprise-only SCIM pricing creates barriers for smaller observability teams
  • The product being sunset in March 2026 makes new investments questionable
  • SCIM provisioning only documented for Okta, leaving other IdP users unsupported
  • Migration uncertainty as ServiceNow Cloud Observability takes over

We were just getting our Lightstep SCIM setup dialed in and now they're sunsetting the whole thing. Not exactly confidence-inspiring for our observability stack.

Reddit r/sysadmin

Why invest in Enterprise pricing for SCIM when the product has an expiration date? We're already evaluating alternatives.

IT Admin, Tech Forum

The recurring theme

The combination of Enterprise-only SCIM pricing and the March 2026 sunset creates a perfect storm—teams either can't afford proper provisioning or won't invest knowing the product is being discontinued.

The decision

Your SituationRecommendation
Using Lightstep before March 2026 sunsetPlan migration now: avoid investing in doomed SCIM setup
Migrating to ServiceNow Cloud ObservabilityEvaluate if Enterprise pricing justifies native SCIM
Need SCIM but not ready for Enterprise costsUse Stitchflow: get provisioning without the tier commitment
Already on Enterprise with SCIM accessUse native SCIM: you're paying for it anyway
Small team, low churn, migration timeline unclearUse Stitchflow: flexible provisioning during transition period

The bottom line

With Lightstep sunsetting in March 2026 and ServiceNow Cloud Observability requiring Enterprise pricing for native SCIM, teams face costly upgrades during an already disruptive migration. Stitchflow provides SCIM-level provisioning without the Enterprise commitment, giving you flexibility during the transition.

Make Lightstep workflows AI-native

Lightstep gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

None

Key limitations

  • Renamed to ServiceNow Cloud Observability in August 2023
  • Product being sunset after March 1, 2026
  • SCIM provisioning documented for Okta only
  • Can provision/deprovision users and update names via Okta

Documentation not available.

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Where to enable

Okta Admin Console → Applications → Lightstep → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Okta integration supports SSO and SCIM provisioning for user management.

Lightstep gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app

Where to enable

Entra admin center → Enterprise applications → Lightstep → Single sign-on

Microsoft Entra ID SSO supported. SCIM provisioning primarily via Okta.

Use Stitchflow for automated provisioning.

Unlock SCIM for
Lightstep

Lightstep gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Lightstep logo
Lightstep
via Stitchflow

Last updated: 2026-01-20

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Alteryx logo

Alteryx

SCIM Tax
SCIM StatusIncluded
Manual Cost$9,490/yr

Alteryx supports native SCIM 2.0 provisioning, but only on Enterprise plans with custom pricing (7+ users minimum). The feature requires SSO (SAML or OIDC) to be configured first and completely overrides manual user management. For teams on Professional ($5,000/user/year) or Business ($10,000-$20,000/user/year) plans, accessing SCIM means upgrading to Enterprise - often a significant cost increase for functionality that should be table stakes. This creates a provisioning gap for most Alteryx deployments. Without automated user lifecycle management, IT teams face manual onboarding/offboarding workflows, delayed access provisioning, and compliance risks around orphaned accounts. The high per-user costs make Alteryx particularly expensive to scale, and forcing an Enterprise upgrade just for basic provisioning automation compounds that challenge.

View full guide
Atlan logo

Atlan

SCIM Tax
SCIM StatusIncluded
Manual Cost$9,490/yr

Atlan supports native SCIM 2.0 provisioning with full user and group management capabilities. However, SCIM is only available on Enterprise tier, which requires custom pricing negotiations. Additionally, SSO must be enabled before SCIM can be configured, and Atlan's pricing tiers (Starter, Premier, Enterprise) are not publicly disclosed, making cost planning difficult for IT teams. This creates a significant barrier for organizations wanting automated provisioning without committing to enterprise-level contracts. For data teams evaluating Atlan, the lack of transparent pricing means you can't budget for provisioning capabilities upfront. The SSO prerequisite also forces organizations into a specific implementation sequence that may not align with their rollout timeline.

View full guide
Benchling logo

Benchling

SCIM Tax
SCIM StatusIncluded
Manual Cost$9,490/yr

Benchling supports SCIM provisioning, but only on Enterprise plans with custom pricing that typically starts at $1M+ annually. This creates a massive barrier: organizations on Professional plans ($20,000+/year) face a 50x+ price increase to unlock automated user provisioning. Even mid-sized life sciences teams end up paying enterprise-level licensing just to automate basic user lifecycle management. The pricing gap is so extreme that most organizations either stick with manual provisioning or delay Benchling adoption entirely. This creates a significant operational burden for IT teams managing researchers across multiple lab environments. Manual user provisioning in a platform that handles sensitive R&D data introduces compliance risks and delays researcher onboarding. When a scientist joins or leaves, IT must manually coordinate access across Benchling's complex permission structure for notebooks, entities, and workflows. For organizations with frequent collaborator access or seasonal research teams, this becomes unmanageable.

View full guide