Summary and recommendation
Microsoft Advertising does not support SCIM provisioning on any plan or pricing tier. While the platform offers Microsoft Account sign-in integration and provides user management through the Bing Ads API, there is no standardized SCIM endpoint for automated user lifecycle management. IT teams must rely on manual user invitations through the platform's Settings > User management interface or build custom API integrations to handle provisioning, deprovisioning, and role assignments across advertising accounts and campaigns.
This creates a significant operational gap for enterprises managing multiple advertising accounts or agency structures. Without SCIM support, departing employees retain access until manually removed, creating security risks around budget control and campaign management. The manual overhead becomes particularly problematic for agencies managing hundreds of client accounts or enterprises with complex advertising hierarchies where users need specific permissions across different campaigns and account levels.
The strategic alternative
Microsoft Advertising has no native SCIM. That leaves a workflow gap in offboarding, access reviews, and license cleanup unless your team handles the app another way. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | No |
| SCIM tier required | N/A |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | Via third-party | ❌ | No dedicated Microsoft Advertising/Bing Ads integration in Okta. Microsoft Account integration exists but not for ads platform. |
| Microsoft Entra ID | ✓ | ❌ | Users can sign in with Microsoft Account. No SCIM provisioning - user management via Bing Ads API or manual UI. |
| Google Workspace | Via third-party | ❌ | No native support |
| OneLogin | Via third-party | ❌ | No native support |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Microsoft Advertising accounts manually. Here's what that costs:
The Microsoft Advertising pricing problem
Microsoft Advertising gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Standard Access | Free platform (pay-per-click) | ||
| Agency Management | Free platform (pay-per-click) | ||
| Enterprise Hierarchy | Free platform (pay-per-click) |
Pricing structure
| Plan | Price | SCIM |
|---|---|---|
| Standard Access | Free platform (pay-per-click) | ❌ Not available |
| Agency Management | Free platform (pay-per-click) | ❌ Not available |
| Enterprise Hierarchy | Free platform (pay-per-click) | ❌ Not available |
What this means in practice
Without SCIM support, IT teams face these manual overhead costs:
Manual user management
API integration complexity
Additional constraints
Summary of challenges
- Microsoft Advertising does not provide native SCIM at any price tier
- Organizations must rely on third-party tools or manual provisioning
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What Microsoft Advertising actually offers for identity
Microsoft Account Sign-In
Microsoft Advertising leverages Microsoft Account authentication for user access:
| Setting | Details |
|---|---|
| Protocol | Microsoft Account OAuth |
| Account requirement | Users need existing Microsoft Account |
| Configuration | Built-in - no additional setup required |
| User creation | Manual invitation only |
Key limitation: While users can sign in with their Microsoft Account, this doesn't provide enterprise-grade identity management or automated provisioning.
Manual User Management
Microsoft Advertising provides basic user management through their web interface:
| Feature | Method |
|---|---|
| Add users | Manual invitation via Settings > User management |
| Remove users | Manual deletion through admin interface |
| Role assignment | Manual selection during invitation |
| Bulk operations | Not supported |
Bing Ads API (Developer Option)
For programmatic user management, Microsoft offers the Bing Ads API:
| Capability | Details |
|---|---|
| User creation | Available via CustomerManagementService |
| User updates | Supported through API calls |
| Account hierarchy | Multi-level agency/client structure |
| Authentication | OAuth 2.0 with Microsoft Account |
Reality check: The API requires significant development resources and ongoing maintenance. Most IT teams need SCIM-level automation without building custom integrations.
What's Missing
Microsoft Advertising lacks enterprise identity essentials:
What IT admins are saying
Microsoft Advertising's lack of automated provisioning forces IT teams into manual user management workflows:
- Users must be manually invited through the Microsoft Advertising interface
- No SCIM support means provisioning relies on the Bing Ads API or manual processes
- Account access management becomes complex across multiple advertising accounts
- Employee offboarding requires remembering to revoke Microsoft Advertising access separately
No dedicated Microsoft Advertising/Bing Ads integration in Okta. Microsoft Account integration exists but not for ads platform.
User management available via Bing Ads API or manual UI.
The recurring theme
While users can sign in with their Microsoft Account, there's no enterprise-grade provisioning system. IT teams must either build custom API integrations or manage advertising platform access through manual invitation workflows, creating security gaps during employee lifecycle changes.
The decision
| Your Situation | Recommendation |
|---|---|
| Small marketing team (<10 users) | Manual management through Microsoft Ads UI is acceptable |
| Agency managing single advertiser accounts | Manual user invites with Microsoft Account SSO |
| Large enterprise with multiple ad accounts | Use Stitchflow: automation essential for scale |
| Agency managing 20+ client accounts | Use Stitchflow: automation strongly recommended |
| Organization with compliance requirements | Use Stitchflow: automation essential for audit trail |
The bottom line
Microsoft Advertising has no native SCIM. That means one more workflow gap in offboarding, access reviews, and license cleanup unless your team handles it another way.
Close the Microsoft Advertising workflow gap
Microsoft Advertising is one gap in a broader workflow. Stitchflow builds and maintains the offboarding, access review, or license workflow across every app in your environment.
Technical specifications
SCIM Version
Not specifiedSupported Operations
Not specifiedSupported Attributes
Plan requirement
Not specifiedPrerequisites
Not specifiedKey limitations
- No SCIM provisioning support
- User management available via Bing Ads API
- Supports Microsoft Account sign-in but not enterprise SCIM
- Account hierarchy for agency/enterprise management available
- Manual user invitation through Settings > User management
Documentation not available.
Close the workflow gap in
Microsoft Advertising
Microsoft Advertising has no native SCIM. That leaves one more workflow gap in offboarding, access reviews, and license cleanup unless your team handles it another way.
Start with the free gap diagnostic


