Summary and recommendation
Microsoft Advertising does not support SCIM provisioning on any plan or pricing tier. While the platform offers Microsoft Account sign-in integration and provides user management through the Bing Ads API, there is no standardized SCIM endpoint for automated user lifecycle management. IT teams must rely on manual user invitations through the platform's Settings > User management interface or build custom API integrations to handle provisioning, deprovisioning, and role assignments across advertising accounts and campaigns.
This creates a significant operational gap for enterprises managing multiple advertising accounts or agency structures. Without SCIM support, departing employees retain access until manually removed, creating security risks around budget control and campaign management. The manual overhead becomes particularly problematic for agencies managing hundreds of client accounts or enterprises with complex advertising hierarchies where users need specific permissions across different campaigns and account levels.
The strategic alternative
Microsoft Advertising has no native SCIM. Automate offboarding, user access reviews, and license workflows across every app, including the ones without APIs. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | No |
| SCIM tier required | N/A |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | Via third-party | ❌ | No dedicated Microsoft Advertising/Bing Ads integration in Okta. Microsoft Account integration exists but not for ads platform. |
| Microsoft Entra ID | ✓ | ❌ | Users can sign in with Microsoft Account. No SCIM provisioning - user management via Bing Ads API or manual UI. |
| Google Workspace | Via third-party | ❌ | No native support |
| OneLogin | Via third-party | ❌ | No native support |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Microsoft Advertising accounts manually. Here's what that costs:
The Microsoft Advertising pricing problem
Microsoft Advertising gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Standard Access | Free platform (pay-per-click) | ||
| Agency Management | Free platform (pay-per-click) | ||
| Enterprise Hierarchy | Free platform (pay-per-click) |
Pricing structure
| Plan | Price | SCIM |
|---|---|---|
| Standard Access | Free platform (pay-per-click) | ❌ Not available |
| Agency Management | Free platform (pay-per-click) | ❌ Not available |
| Enterprise Hierarchy | Free platform (pay-per-click) | ❌ Not available |
What this means in practice
Without SCIM support, IT teams face these manual overhead costs:
Manual user management
API integration complexity
Additional constraints
Summary of challenges
- Microsoft Advertising does not provide native SCIM at any price tier
- Organizations must rely on third-party tools or manual provisioning
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What Microsoft Advertising actually offers for identity
Microsoft Account Sign-In
Microsoft Advertising leverages Microsoft Account authentication for user access:
| Setting | Details |
|---|---|
| Protocol | Microsoft Account OAuth |
| Account requirement | Users need existing Microsoft Account |
| Configuration | Built-in - no additional setup required |
| User creation | Manual invitation only |
Key limitation: While users can sign in with their Microsoft Account, this doesn't provide enterprise-grade identity management or automated provisioning.
Manual User Management
Microsoft Advertising provides basic user management through their web interface:
| Feature | Method |
|---|---|
| Add users | Manual invitation via Settings > User management |
| Remove users | Manual deletion through admin interface |
| Role assignment | Manual selection during invitation |
| Bulk operations | Not supported |
Bing Ads API (Developer Option)
For programmatic user management, Microsoft offers the Bing Ads API:
| Capability | Details |
|---|---|
| User creation | Available via CustomerManagementService |
| User updates | Supported through API calls |
| Account hierarchy | Multi-level agency/client structure |
| Authentication | OAuth 2.0 with Microsoft Account |
Reality check: The API requires significant development resources and ongoing maintenance. Most IT teams need SCIM-level automation without building custom integrations.
What's Missing
Microsoft Advertising lacks enterprise identity essentials:
What IT admins are saying
Microsoft Advertising's lack of automated provisioning forces IT teams into manual user management workflows:
- Users must be manually invited through the Microsoft Advertising interface
- No SCIM support means provisioning relies on the Bing Ads API or manual processes
- Account access management becomes complex across multiple advertising accounts
- Employee offboarding requires remembering to revoke Microsoft Advertising access separately
No dedicated Microsoft Advertising/Bing Ads integration in Okta. Microsoft Account integration exists but not for ads platform.
User management available via Bing Ads API or manual UI.
The recurring theme
While users can sign in with their Microsoft Account, there's no enterprise-grade provisioning system. IT teams must either build custom API integrations or manage advertising platform access through manual invitation workflows, creating security gaps during employee lifecycle changes.
The decision
| Your Situation | Recommendation |
|---|---|
| Small marketing team (<10 users) | Manual management through Microsoft Ads UI is acceptable |
| Agency managing single advertiser accounts | Manual user invites with Microsoft Account SSO |
| Large enterprise with multiple ad accounts | Use Stitchflow: automation essential for scale |
| Agency managing 20+ client accounts | Use Stitchflow: automation strongly recommended |
| Organization with compliance requirements | Use Stitchflow: automation essential for audit trail |
The bottom line
Microsoft Advertising offers no SCIM provisioning whatsoever—just manual user invitations through the UI or API-based management. For enterprises and agencies managing multiple accounts or large user bases, Stitchflow eliminates the manual overhead while providing the audit trail compliance demands.
Make Microsoft Advertising workflows AI-native
Microsoft Advertising has no native SCIM. We build complete offboarding, user access reviews, and license workflows across every app, including the ones without APIs.
Technical specifications
SCIM Version
Not specifiedSupported Operations
Not specifiedSupported Attributes
Plan requirement
Not specifiedPrerequisites
Not specifiedKey limitations
- No SCIM provisioning support
- User management available via Bing Ads API
- Supports Microsoft Account sign-in but not enterprise SCIM
- Account hierarchy for agency/enterprise management available
- Manual user invitation through Settings > User management
Documentation not available.
Unlock SCIM for
Microsoft Advertising
Microsoft Advertising has no native SCIM. We still automate end-to-end workflows across every app, including the ones without APIs.
See how it works


