Looker SCIM guide

Holistics, the self-service business intelligence platform, does not support SCIM provisioning on any plan. While Holistics offers SAML 2.0 SSO integration with major identity providers including Okta and Azure AD, this only handles authentication—users must still be manually created and managed within the Holistics platform. For BI teams that need to rapidly onboard and offboard data analysts and business users across projects, this creates a significant administrative burden that scales poorly with team growth. The gap between SSO authentication and actual user provisioning becomes particularly problematic for data teams managing multiple projects with varying access requirements. Without automated provisioning, IT teams must manually coordinate user creation, role assignments, and deprovisioning across both the identity provider and Holistics platform. This manual process creates compliance risks around orphaned accounts and increases the likelihood of access control errors in environments handling sensitive business data.

Builder.io, the visual CMS platform used by developers and content teams, does not offer SCIM provisioning on any plan. While Builder.io provides SAML 2.0 SSO integration on their Enterprise tier with identity providers like Okta, Azure AD, and Google Workspace, this only handles authentication—not the automated provisioning and deprovisioning of user accounts. IT teams must manually create and manage user accounts in Builder.io, then separately assign appropriate permissions for different Spaces and projects. This creates a significant operational gap for organizations using Builder.io across multiple content teams. Without SCIM, departing employees retain access to Builder.io Spaces until manually removed, creating security risks around content management systems that often contain sensitive marketing materials and website code. The manual overhead becomes particularly problematic when managing access across multiple Builder.io Spaces, each requiring individual permission management for developers, marketers, and content editors.

Culture Amp, the employee engagement and people analytics platform, explicitly does not support SCIM provisioning on any plan. This is an intentional design decision - Culture Amp separates authentication (handled via SAML SSO) from employee data management (handled via HRIS integrations). While this approach works for their core HR use case, it creates a significant gap for IT teams managing user lifecycle across multiple SaaS applications through their identity provider. The lack of SCIM support means IT admins cannot automate user provisioning, deprovisioning, or attribute updates through standard identity governance workflows. Since Culture Amp contains sensitive employee feedback data and organizational hierarchy information that affects survey visibility, manual user management creates both security risks and operational overhead. Organizations are forced to rely on separate HRIS integrations or manual processes, breaking the unified provisioning model that most enterprises expect from their SaaS stack.