Stitchflow
Power BI logo

Power BI SCIM guide

Native SCIM

How to automate Power BI user provisioning, and what it actually costs

Native SCIM requires Premium/Fabric plan

Summary and recommendation

Power BI does not offer a dedicated SCIM endpoint or standard provisioning API. As a native Microsoft product, Power BI relies entirely on Microsoft Entra ID for user provisioning and license management. While this works seamlessly for Microsoft-centric environments, organizations using non-Microsoft identity providers (Okta, Google Workspace, OneLogin) must first sync users to Entra ID before they can provision Power BI licenses. This creates a complex, multi-hop provisioning chain where user lifecycle changes must flow through your primary IdP, sync to Entra ID, and then provision Power BI licenses via group assignments—a process that's prone to delays and synchronization gaps.

The licensing complexity compounds the problem. Power BI's recent 40% price increase on Pro licenses (now $14/month, up from $10) and the transition from P-SKUs to Microsoft Fabric capacity pricing makes precise license management critical for cost control. Without direct SCIM support, IT teams must manually manage Power BI license assignments through Entra ID groups, making it difficult to immediately deprovision expensive licenses when users leave or change roles. The SSO integration handles authentication but doesn't address the core challenge of automated license lifecycle management.

The strategic alternative

Power BI gates SCIM behind Premium/Fabric. Skip the Premium/Fabric plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredPro
SSO required first?No
SSO available?Yes
SSO protocolMicrosoft Entra ID (OAuth 2.0/OIDC)
DocumentationNot available

Supported identity providers

IdPSSOSCIMNotes
OktaSSO only
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Power BI accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Power BI pricing problem

Power BI gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Free$0/user (view only)
Pro$14/user/mo (increased from $10)
Premium Per User$24/user/mo (increased from $20)
Fabric CapacityCustom pricing

Pricing structure

PlanPriceSSOSCIM
Free$0/user (view only)
Pro$14/user/mo (increased from $10)
Premium Per User$24/user/mo (increased from $20)
Fabric CapacityCustom pricing

Note: Microsoft implemented a 40% price increase for Pro licenses in April 2025 ($10 → $14) and 20% for Premium Per User ($20 → $24).

What this means in practice

Organizations using Okta, Google Workspace, or OneLogin face a complex provisioning architecture:

For non-Microsoft IdPs

Must establish Entra ID sync first (additional infrastructure cost)
User provisioning flows through two systems
Your IdP → Entra ID → Power BI
License assignment happens via Entra ID group membership, not direct API calls
No direct SCIM integration possible with third-party identity providers

For Microsoft-native organizations

Provisioning works seamlessly through native Entra ID integration
License assignment via group membership in Entra ID
No additional SCIM configuration needed

Additional constraints

Mandatory Entra ID dependency
Even with other IdPs, you must maintain Entra ID as an intermediary system
No third-party IdP support
Direct SCIM provisioning from Okta, Google Workspace, or OneLogin is impossible
Licensing complexity
Pro vs Premium Per User licensing decisions must be made at the Entra ID group level
Workspace access gaps
While users can be provisioned, workspace-level permissions often require manual assignment
Dual identity management
Non-Microsoft shops end up managing identities in both their primary IdP and Entra ID

Summary of challenges

  • Power BI supports SCIM but only at Pro tier (Microsoft Fabric capacity (replaces P-SKUs))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What Power BI actually offers for identity

Power BI doesn't offer dedicated SCIM provisioning. Instead, it relies entirely on Microsoft Entra ID (formerly Azure AD) for all identity management:

Microsoft Entra ID Integration (Built-in)

Power BI is a native Microsoft service that uses Entra ID for all authentication and user management:

FeatureDetails
AuthenticationOAuth 2.0/OIDC via Entra ID
User provisioningEntra ID group-based license assignment
License managementPro/Premium licenses assigned through Entra groups
Workspace accessManaged via Entra security groups
JIT provisioning✓ Yes (automatic account creation)

What This Means for Non-Microsoft Identity Providers

If you're using Okta, OneLogin, or Google Workspace as your primary IdP, Power BI provisioning requires a two-step process:

Your IdPRequired Integration Path
OktaOkta → Entra ID sync → Power BI
OneLoginOneLogin → Entra ID sync → Power BI
Google WorkspaceGoogle → Entra ID sync → Power BI

Translation: You can't provision directly to Power BI from non-Microsoft identity providers. You must first sync users to Entra ID, then manage Power BI licensing through Entra group assignments.

License Assignment Complexity

Power BI's licensing model adds operational overhead:

Pro licenses
($14/user/month, increased 40% in April 2025): Required for content creation and sharing
Premium Per User
($24/user/month, increased 20% in April 2025): Advanced analytics features
Microsoft Fabric capacity
Replaces the retired P-SKUs for enterprise deployments

Each license type requires separate Entra group management, meaning IT teams juggle multiple security groups to control user access levels.

What IT admins are saying

Community sentiment on Power BI's provisioning reflects the challenges of Microsoft ecosystem lock-in:

  • No direct SCIM support for non-Microsoft identity providers
  • All provisioning must route through Microsoft Entra ID first
  • Complex licensing model with Pro vs Premium Per User tiers
  • Third-party IdP users face additional sync complexity

Must use Microsoft Entra ID for provisioning... No third-party IdP SCIM support.

Microsoft Learn documentation

The recurring theme

Power BI's tight integration with Microsoft Entra ID creates provisioning barriers for organizations using non-Microsoft identity providers, forcing them into Microsoft's ecosystem or complex sync workarounds.

The decision

Your SituationRecommendation
Pure Microsoft shop (all Entra ID)Stick with native Entra provisioning
Mixed IdP environment (Okta/Google + Microsoft)Use Stitchflow: eliminates Entra sync complexity
Large organization (100+ Power BI users)Use Stitchflow: automates license assignment at scale
Compliance-heavy industryUse Stitchflow: provides audit trails beyond Entra logs
Multi-workspace Power BI deploymentUse Stitchflow: handles workspace access automation

The bottom line

Power BI's Microsoft-only provisioning creates friction for organizations using non-Microsoft identity providers, forcing them through Entra ID sync processes. For mixed environments or complex deployments requiring workspace automation, Stitchflow eliminates the middleware complexity while providing comprehensive audit capabilities.

Make Power BI workflows AI-native

Power BI gates SCIM behind Premium/Fabric. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Premium/Fabric upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Pro

Prerequisites

None

Key limitations

  • No dedicated SCIM endpoint
  • Must use Microsoft Entra ID for provisioning
  • Licensing assigned via Entra group membership
  • Third-party IdPs require Entra ID sync first

Documentation not available.

Unlock SCIM for
Power BI

Power BI gates SCIM behind Premium/Fabric plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Power BI logo
Power BI
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide