Stitchflow
Notion logo

Notion SCIM guide

Native SCIM

How to automate Notion user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Notion supports SCIM provisioning, but only on Enterprise plans with custom pricing typically ranging $18-25/user/month. This creates a significant gap for teams on Business plans ($20/user/month) who already have SAML SSO but can't automate user lifecycle management. The Enterprise requirement means a 100-person team faces $1,800-5,000/month in licensing costs just to unlock basic provisioning automation.

This pricing structure is particularly problematic because Notion already provides SSO on Business plans, creating the expectation that provisioning should follow. Without SCIM, IT teams must manually manage user accounts despite having automated authentication - a compliance risk that scales poorly as teams grow. Google Workspace users face an additional limitation: even on Enterprise, SCIM doesn't support group provisioning and deprovisioning.

The strategic alternative

Notion gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceLimitedNo group provisioning/deprovisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Notion accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Notion pricing problem

Notion gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure (Billed Annually)

PlanPriceSSOSCIM
Plus$10/user/mo
Business$20/user/mo
Enterprise$18-25/user/mo (custom)

Note: The Business tier includes SAML SSO but excludes SCIM provisioning, forcing organizations to negotiate custom Enterprise pricing for automated user management.

What this means in practice

Moving from Business to Enterprise for SCIM access (using mid-range $22/user Enterprise pricing):

Team SizeAnnual Upgrade Cost
50 users+$1,200/year
100 users+$2,400/year
200 users+$4,800/year

Calculation: ($22 - $20) × users × 12 months

For organizations currently on Plus ($10/user), the jump to Enterprise represents a 120-150% price increase purely for SCIM access.

Additional constraints

Custom pricing
Enterprise requires sales negotiation with no transparent pricing, extending procurement timelines.
Google Workspace limitation
SCIM integration with Google Workspace doesn't support group provisioning/deprovisioning, limiting automation capabilities.
Owner-only token generation
Only Enterprise organization owners can generate SCIM API tokens, creating administrative bottlenecks.
SSO gap
The Business plan's SSO-without-SCIM configuration creates an awkward middle ground that doesn't solve automated provisioning needs.

Summary of challenges

  • Notion supports SCIM but only at Enterprise tier ($18-25/user/month (custom))
  • Google Workspace users get limited SCIM (no group sync)
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Notion doesn't sell SCIM separately. You get it bundled with Enterprise plan features at $18-25/user/month:

SCIM automated provisioning and deprovisioning
SAML single sign-on (SSO)
Advanced admin controls and audit logs
Guest access management
Enhanced security and compliance features
Priority customer support
Advanced workspace permissions

The frustrating part? Business plan ($20/user/month) already includes SAML SSO, but Notion artificially gates SCIM behind Enterprise pricing. You're essentially paying a premium just to add automated provisioning to SSO you could already have.

Stitchflow Insight

We estimate ~60% of Enterprise features are irrelevant for teams that simply need automated user management. Most organizations upgrading to Enterprise are paying for advanced workspace controls and compliance features they'll never configure.

What IT admins are saying

Community sentiment on Notion's SCIM implementation reveals clear pricing frustration. Common complaints:

  • Business plan includes SAML SSO but artificially excludes SCIM provisioning
  • Forced upgrade to opaque Enterprise pricing just for user automation
  • Lack of transparent Enterprise costs creates budget uncertainty
  • Google Workspace users lose group provisioning functionality entirely

Business plan has SSO but not SCIM - frustrating gap

IT Administrator feedback

Enterprise pricing not transparent

Community review

Google Workspace users miss group sync feature

Integration feedback

The recurring theme

Notion creates an artificial barrier between SSO and SCIM, forcing teams already paying $20/user/month for Business to negotiate custom Enterprise pricing just to automate what their identity provider should handle natively.

The decision

Your SituationRecommendation
On Business plan, need SCIMUse Stitchflow: avoid the Enterprise tier jump and custom pricing negotiations
On Plus plan, need automated provisioningUse Stitchflow: skip two expensive tier upgrades to reach SCIM
Using Google Workspace as IdPUse Stitchflow: native SCIM doesn't support group provisioning with Google
Already on Enterprise planUse native SCIM: you're paying premium pricing that includes it
Small team with low turnoverManual provisioning may suffice: but watch for security gaps as you grow

The bottom line

Notion gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.

Close the Notion workflow gap

Notion gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.

Across every app in the workflow, including the ones without APIs
Built in less than a week, with roughly 2 hours from your team
You review the exceptions. Stitchflow maintains the workflow underneath
Start with the free gap diagnostic

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SCIM only on Enterprise plan (not Business despite having SSO)
  • Google Workspace SCIM doesn't support groups
  • JIT provisioning not recommended if using SCIM
  • Only Enterprise org owners can generate SCIM API tokens

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Notion → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Enterprise required for SCIM

Notion gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Notion → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Enterprise required for SCIM

Notion gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.

Close the workflow gap in
Notion

Notion gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.

Start with the free gap diagnostic
Admin Console
Directory
Applications
Notion logo
Notion
via Stitchflow

Last updated: 2026-01-02

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Amplitude logo

Amplitude

SCIM Tax

Product Analytics

SCIM StatusIncluded
Manual Cost$11,754/yr

Amplitude supports SCIM provisioning, but only on Growth plans (starting around $36K/year) or Enterprise plans with custom pricing. While Amplitude's SCIM implementation covers the core functionality—creating, updating, and deactivating users—it requires SCIM to be specifically enabled for your organization, and regenerating the SCIM key immediately invalidates existing integrations without warning. For product teams on Plus plans ($49/month), upgrading to Growth just to unlock SCIM means jumping from under $600/year to $36,000+/year—a 60x increase. That's often more than the entire analytics budget for smaller product teams. The gap becomes particularly problematic for cross-functional product teams where analysts, PMs, and engineers need varying levels of access to user behavior data, but manual provisioning creates security risks around sensitive analytics permissions.

View full guide
Bugsnag logo

Bugsnag

SCIM Tax

Error Monitoring / Observability

SCIM StatusIncluded
Manual Cost$11,754/yr

Bugsnag supports native SCIM provisioning, but only on Enterprise plans with custom pricing. This creates a significant cost barrier since you must upgrade from Business ($475/month for 1M events) to Enterprise just to unlock automated user provisioning. For many engineering teams, this represents a substantial price jump for provisioning features that should be standard across all paid plans. The Enterprise requirement is particularly problematic for mid-size development teams who need error monitoring automation but don't require Enterprise-level features. Without SCIM, IT teams must manually provision developer accounts and manage team memberships for project access—creating security gaps when developers change teams or leave the company. OneLogin users face an additional limitation: SCIM isn't supported on Enterprise instances, forcing a workaround through the standard Bugsnag app.

View full guide
Greenhouse logo

Greenhouse

SCIM Tax

HR / Recruiting

SCIM StatusIncluded
Manual Cost$11,754/yr

Greenhouse supports SCIM provisioning, but only on Advanced or Expert tiers (starting around $6,000/year, quote-based). The bigger issue: Greenhouse's SCIM implementation only provisions users—not groups—meaning you lose the organizational structure and permission inheritance that makes identity management scalable. Additionally, you cannot fully delete users via SCIM (only deactivate), and Azure Entra users face a 40-minute sync delay. For recruiting teams managing hiring managers, interviewers, and HR staff across different departments and access levels, the lack of group provisioning creates a significant operational burden. You're forced to manually assign permissions and manage access changes for every user individually. With recruiting involving sensitive candidate data and frequent access changes during hiring cycles, this manual overhead increases both security risk and administrative workload.

View full guide