Stitchflow
Netlify logo

Netlify SCIM guide

Native SCIM

How to automate Netlify user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Netlify supports SCIM (the protocol that lets your identity provider automatically create, update, and remove user accounts), but only on Enterprise plans with custom pricing. Teams on Pro ($20/month with credits) get SAML SSO but no automated provisioning, meaning IT admins must manually manage user lifecycles even after implementing single sign-on.

This creates a significant operational gap. While developers can authenticate through your corporate identity provider, onboarding new team members, updating roles, or deprovisioning departing employees still requires manual intervention in Netlify's interface. For development teams that scale rapidly or have frequent contractor rotations, this manual overhead undermines the security and efficiency benefits of centralized identity management.

The strategic alternative

Netlify gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OpenID Connect
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Netlify accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Netlify pricing problem

Netlify gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Pro$20/mo + credits
EnterpriseCustom pricing

Note: Pro tier includes team-level SAML SSO but no SCIM. Enterprise is required for organization-level SSO with SCIM Directory Sync capabilities.

What this means in practice

Enterprise pricing is custom, but industry benchmarks for developer tooling suggest significant premiums over Pro plans. Teams face a binary choice:

Stay on Pro: Manual user management, team-level SSO only, no automated provisioning/deprovisioning when developers join or leave projects.

Upgrade to Enterprise: Full SCIM automation but at enterprise pricing that typically represents 3-5x cost increases over Pro plans.

Additional constraints

WorkOS dependency
Netlify uses WorkOS for SSO/SCIM configuration, adding a third-party layer to your identity infrastructure.
Organization requirement
SCIM only works at the organization level, not for individual teams within larger organizations.
Custom pricing opacity
Enterprise pricing requires sales engagement with no transparent cost structure.
Credit system complexity
Pro plans use credit-based pricing (introduced September 2025), making cost prediction difficult for growing teams.

Summary of challenges

  • Netlify supports SCIM but only at Enterprise tier (Custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Netlify doesn't sell SCIM à la carte. It's bundled with Enterprise features:

SCIM automated provisioning (via WorkOS)
SAML 2.0 and OpenID Connect SSO (20+ IdP support)
Organization-level access controls
SSO enforcement options (with Owner fallback or strict)
Advanced security settings
Dedicated customer success management
Enhanced support SLA
Custom usage limits and pricing

Stitchflow Insight

If you need enterprise-grade security controls anyway, the upgrade may make sense. If you just want automated user provisioning for your development team, you're paying for a bundle you won't fully use. We estimate ~75% of Enterprise features are irrelevant for teams that only need SCIM to manage developer access to their deployment platform.

What IT admins are saying

Community sentiment on Netlify's SCIM gating is frustration with the Enterprise paywall. Common complaints:

While specific community quotes are limited due to Netlify's developer-focused audience, the pattern mirrors other dev tools: essential IT features restricted to enterprise tiers.

  • Being forced into custom Enterprise pricing just for user provisioning
  • SCIM locked behind the highest tier when competitors offer it on mid-tier plans
  • WorkOS dependency adding another vendor relationship to manage
  • Team-level SSO tease on Pro plans without actual directory sync capabilities

The recurring theme

Netlify treats SCIM as an enterprise-only feature despite Pro teams having legitimate provisioning needs, forcing unnecessary vendor negotiations for basic identity automation.

The decision

Your SituationRecommendation
On Pro plan, need SCIMUse Stitchflow: avoid the Enterprise tier jump and custom pricing
Small dev team, limited budgetUse Stitchflow: build complete workflows across every app in less than a week (~2 hours of your time).
Already on Enterprise with SCIMUse native SCIM: you're paying for WorkOS integration already
Need Enterprise features beyond SCIMEvaluate Enterprise: SCIM comes bundled with WorkOS
Minimal team changes, tight IT budgetManual may work: but monitor for security gaps in dev tool access

The bottom line

Netlify gates SCIM behind Enterprise custom pricing, forcing teams to pay for enterprise features they don't need just to get basic provisioning automation. For dev teams on Pro plans, Stitchflow delivers the same SCIM functionality at predictable flat-rate pricing.

Make Netlify workflows AI-native

Netlify gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Enterprise plan required
  • Uses WorkOS for SSO setup
  • SCIM for organizations only
  • Team-level SSO on lower tiers

Unlock SCIM for
Netlify

Netlify gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Netlify logo
Netlify
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide