Stitchflow
LinkedIn Learning logo

LinkedIn Learning SCIM guide

Native SCIM

How to automate LinkedIn Learning user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

LinkedIn Learning supports SCIM for automated user provisioning, but only on Enterprise plans with custom pricing for 21+ users. While the SCIM implementation is comprehensive—supporting user creation, updates, deactivation, and auto-license assignment—it requires navigating several technical hurdles. OneLogin users must create custom SCIM apps since the native integration doesn't support provisioning. User identifier matching between SSO and SCIM configurations must be precise, and existing user data requires cleanup before enabling SCIM.

For L&D teams managing enterprise-wide learning access, these limitations create operational friction at the worst possible time—when you're trying to scale learning programs across your organization. The Enterprise requirement means smaller teams (under 21 users) are locked out of automated provisioning entirely, forcing manual user management even when learning platform adoption is critical to business objectives.

The strategic alternative

LinkedIn Learning gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, LTI, Google SSO
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages LinkedIn Learning accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The LinkedIn Learning pricing problem

LinkedIn Learning gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Individual$39.99/month
Team$379.99/user/year (2-20 users)
EnterpriseCustom pricing (21+ users)

Plan Structure

PlanPriceSCIM
Individual$39.99/month
Team$379.99/user/year (2-20 users)
EnterpriseCustom pricing (21+ users)

What this means in practice

The jump from Team to Enterprise pricing is substantial. While Team plans cost $379.99 per user annually, Enterprise pricing is custom and typically involves:

Minimum commitment requirements
for annual contracts
Higher per-seat costs
than Team pricing (exact amounts vary by deal size)
Sales process delays
as custom Enterprise pricing requires quote negotiations

For learning platforms provisioning entire workforces, this creates a painful choice: pay significantly more for Enterprise features you may not need, or manage user lifecycle manually across hundreds or thousands of employees.

Additional constraints

OneLogin limitation
The native OneLogin app doesn't support SCIM provisioning - you must configure a custom SCIM application, adding implementation complexity.
User identifier matching
The unique user identifier must exactly match your SSO configuration, requiring careful coordination between SCIM and SSO setup.
Migration requirement
If you have existing users in LinkedIn Learning, you need accurate user data before enabling SCIM to avoid provisioning conflicts.
Full Admin access required
Only LinkedIn Learning Full Admins can generate SCIM bearer tokens, creating a dependency on specific user roles.

Summary of challenges

  • LinkedIn Learning supports SCIM but only at Enterprise tier (custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

LinkedIn Learning doesn't sell SCIM separately. It's bundled with Enterprise plan features:

SCIM automated provisioning (create, update, deactivate users)
Auto-license assignment capabilities
SAML 2.0 single sign-on (SSO)
LTI integration for LMS platforms
Advanced user and group management
Detailed learning analytics and reporting
Custom content integration
Dedicated customer success support
Enterprise-grade security controls

Stitchflow Insight

The Enterprise plan is designed for organizations with 21+ users who need comprehensive learning management capabilities. If you're primarily seeking automated user provisioning and license control, you're paying for extensive L&D administration features you may not use. We estimate ~60% of Enterprise features are irrelevant for IT teams that just want reliable SCIM automation without the learning platform overhead.

What IT admins are saying

Community sentiment on LinkedIn Learning's SCIM implementation is mixed, with specific frustrations around IdP compatibility and setup complexity. Common complaints:

  • OneLogin users forced to create custom SCIM apps instead of using the native integration
  • Complex user identifier matching requirements that cause setup headaches
  • Data migration challenges when SCIM is enabled with existing user bases
  • Enterprise plan requirement locks out smaller teams from automated provisioning

OneLogin's native LinkedIn Learning app doesn't support SCIM provisioning - you have to build a custom SCIM connector which is way more work than it should be.

Reddit r/sysadmin

The user identifier matching between SSO and SCIM configs is unnecessarily complex. One mismatch and your provisioning breaks.

Spiceworks Community

The recurring theme

While LinkedIn Learning offers SCIM functionality, implementation hurdles and IdP-specific limitations create friction that defeats the purpose of streamlined automation.

The decision

Your SituationRecommendation
Need SCIM but not on Enterprise planUse Stitchflow: avoid the custom Enterprise pricing jump
On Enterprise but OneLogin is your IdPUse Stitchflow: OneLogin's native app doesn't support SCIM
Complex user identifier matching requirementsUse Stitchflow: avoid the SSO config alignment headaches
Already on Enterprise with compatible IdPUse native SCIM: you're paying for it
Small team with low turnoverManual may suffice: but watch for license waste without auto-assignment

The bottom line

LinkedIn Learning locks SCIM behind Enterprise pricing and has notable IdP compatibility gaps (OneLogin requires custom apps). For organizations needing learning platform automation without Enterprise costs or IdP workarounds, Stitchflow delivers reliable provisioning at predictable pricing.

Make LinkedIn Learning workflows AI-native

LinkedIn Learning gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • OneLogin native app doesn't support SCIM - need custom SCIM app
  • Unique User Identifier must match SSO config
  • Existing user list must be accurate before enabling SCIM

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → LinkedIn Learning → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Full SCIM provisioning: create, update, delete users and groups. Auto-license assignment available. OneLogin native app doesn't support SCIM - need custom SCIM app. Stop provisioning before making changes to avoid accidental license revocation.

LinkedIn Learning gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → LinkedIn Learning → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Full SCIM provisioning with Azure AD. Bearer token generated by Full Admin in LinkedIn Learning. Unique User Identifier must match SSO config.

LinkedIn Learning gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
LinkedIn Learning

LinkedIn Learning gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
LinkedIn Learning logo
LinkedIn Learning
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Amplitude logo

Amplitude

SCIM Tax

Product Analytics

SCIM StatusIncluded
Manual Cost$11,754/yr

Amplitude supports SCIM provisioning, but only on Growth plans (starting around $36K/year) or Enterprise plans with custom pricing. While Amplitude's SCIM implementation covers the core functionality—creating, updating, and deactivating users—it requires SCIM to be specifically enabled for your organization, and regenerating the SCIM key immediately invalidates existing integrations without warning. For product teams on Plus plans ($49/month), upgrading to Growth just to unlock SCIM means jumping from under $600/year to $36,000+/year—a 60x increase. That's often more than the entire analytics budget for smaller product teams. The gap becomes particularly problematic for cross-functional product teams where analysts, PMs, and engineers need varying levels of access to user behavior data, but manual provisioning creates security risks around sensitive analytics permissions.

View full guide
Bugsnag logo

Bugsnag

SCIM Tax

Error Monitoring / Observability

SCIM StatusIncluded
Manual Cost$11,754/yr

Bugsnag supports native SCIM provisioning, but only on Enterprise plans with custom pricing. This creates a significant cost barrier since you must upgrade from Business ($475/month for 1M events) to Enterprise just to unlock automated user provisioning. For many engineering teams, this represents a substantial price jump for provisioning features that should be standard across all paid plans. The Enterprise requirement is particularly problematic for mid-size development teams who need error monitoring automation but don't require Enterprise-level features. Without SCIM, IT teams must manually provision developer accounts and manage team memberships for project access—creating security gaps when developers change teams or leave the company. OneLogin users face an additional limitation: SCIM isn't supported on Enterprise instances, forcing a workaround through the standard Bugsnag app.

View full guide
Greenhouse logo

Greenhouse

SCIM Tax

HR / Recruiting

SCIM StatusIncluded
Manual Cost$11,754/yr

Greenhouse supports SCIM provisioning, but only on Advanced or Expert tiers (starting around $6,000/year, quote-based). The bigger issue: Greenhouse's SCIM implementation only provisions users—not groups—meaning you lose the organizational structure and permission inheritance that makes identity management scalable. Additionally, you cannot fully delete users via SCIM (only deactivate), and Azure Entra users face a 40-minute sync delay. For recruiting teams managing hiring managers, interviewers, and HR staff across different departments and access levels, the lack of group provisioning creates a significant operational burden. You're forced to manually assign permissions and manage access changes for every user individually. With recruiting involving sensitive candidate data and frequent access changes during hiring cycles, this manual overhead increases both security risk and administrative workload.

View full guide