Summary and recommendation
Power BI does not offer a dedicated SCIM endpoint or standard provisioning API. As a native Microsoft product, Power BI relies entirely on Microsoft Entra ID for user provisioning and license management. While this works seamlessly for Microsoft-centric environments, organizations using non-Microsoft identity providers (Okta, Google Workspace, OneLogin) must first sync users to Entra ID before they can provision Power BI licenses. This creates a complex, multi-hop provisioning chain where user lifecycle changes must flow through your primary IdP, sync to Entra ID, and then provision Power BI licenses via group assignments—a process that's prone to delays and synchronization gaps.
The licensing complexity compounds the problem. Power BI's recent 40% price increase on Pro licenses (now $14/month, up from $10) and the transition from P-SKUs to Microsoft Fabric capacity pricing makes precise license management critical for cost control. Without direct SCIM support, IT teams must manually manage Power BI license assignments through Entra ID groups, making it difficult to immediately deprovision expensive licenses when users leave or change roles. The SSO integration handles authentication but doesn't address the core challenge of automated license lifecycle management.
The strategic alternative
Power BI gates SCIM behind Premium/Fabric. Skip the Premium/Fabric plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Pro |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | Microsoft Entra ID (OAuth 2.0/OIDC) |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ❌ | SSO only |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Power BI accounts manually. Here's what that costs:
The Power BI pricing problem
Power BI gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Free | $0/user (view only) | ||
| Pro | $14/user/mo (increased from $10) | ||
| Premium Per User | $24/user/mo (increased from $20) | ||
| Fabric Capacity | Custom pricing |
Pricing structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Free | $0/user (view only) | ||
| Pro | $14/user/mo (increased from $10) | ||
| Premium Per User | $24/user/mo (increased from $20) | ||
| Fabric Capacity | Custom pricing |
Note: Microsoft implemented a 40% price increase for Pro licenses in April 2025 ($10 → $14) and 20% for Premium Per User ($20 → $24).
What this means in practice
Organizations using Okta, Google Workspace, or OneLogin face a complex provisioning architecture:
For non-Microsoft IdPs
For Microsoft-native organizations
Additional constraints
Summary of challenges
- Power BI supports SCIM but only at Pro tier (Microsoft Fabric capacity (replaces P-SKUs))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What Power BI actually offers for identity
Power BI doesn't offer dedicated SCIM provisioning. Instead, it relies entirely on Microsoft Entra ID (formerly Azure AD) for all identity management:
Microsoft Entra ID Integration (Built-in)
Power BI is a native Microsoft service that uses Entra ID for all authentication and user management:
| Feature | Details |
|---|---|
| Authentication | OAuth 2.0/OIDC via Entra ID |
| User provisioning | Entra ID group-based license assignment |
| License management | Pro/Premium licenses assigned through Entra groups |
| Workspace access | Managed via Entra security groups |
| JIT provisioning | ✓ Yes (automatic account creation) |
What This Means for Non-Microsoft Identity Providers
If you're using Okta, OneLogin, or Google Workspace as your primary IdP, Power BI provisioning requires a two-step process:
| Your IdP | Required Integration Path |
|---|---|
| Okta | Okta → Entra ID sync → Power BI |
| OneLogin | OneLogin → Entra ID sync → Power BI |
| Google Workspace | Google → Entra ID sync → Power BI |
Translation: You can't provision directly to Power BI from non-Microsoft identity providers. You must first sync users to Entra ID, then manage Power BI licensing through Entra group assignments.
License Assignment Complexity
Power BI's licensing model adds operational overhead:
Each license type requires separate Entra group management, meaning IT teams juggle multiple security groups to control user access levels.
What IT admins are saying
Community sentiment on Power BI's provisioning reflects the challenges of Microsoft ecosystem lock-in:
- No direct SCIM support for non-Microsoft identity providers
- All provisioning must route through Microsoft Entra ID first
- Complex licensing model with Pro vs Premium Per User tiers
- Third-party IdP users face additional sync complexity
Must use Microsoft Entra ID for provisioning... No third-party IdP SCIM support.
The recurring theme
Power BI's tight integration with Microsoft Entra ID creates provisioning barriers for organizations using non-Microsoft identity providers, forcing them into Microsoft's ecosystem or complex sync workarounds.
The decision
| Your Situation | Recommendation |
|---|---|
| Pure Microsoft shop (all Entra ID) | Stick with native Entra provisioning |
| Mixed IdP environment (Okta/Google + Microsoft) | Use Stitchflow: eliminates Entra sync complexity |
| Large organization (100+ Power BI users) | Use Stitchflow: automates license assignment at scale |
| Compliance-heavy industry | Use Stitchflow: provides audit trails beyond Entra logs |
| Multi-workspace Power BI deployment | Use Stitchflow: handles workspace access automation |
The bottom line
Power BI's Microsoft-only provisioning creates friction for organizations using non-Microsoft identity providers, forcing them through Entra ID sync processes. For mixed environments or complex deployments requiring workspace automation, Stitchflow eliminates the middleware complexity while providing comprehensive audit capabilities.
Make Power BI workflows AI-native
Power BI gates SCIM behind Premium/Fabric. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Pro
Prerequisites
None
Key limitations
- No dedicated SCIM endpoint
- Must use Microsoft Entra ID for provisioning
- Licensing assigned via Entra group membership
- Third-party IdPs require Entra ID sync first
Documentation not available.
Unlock SCIM for
Power BI
Power BI gates SCIM behind Premium/Fabric plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works


