Summary and recommendation
RollWorks includes SCIM provisioning on all paid packages (starting at $975/month), which automatically creates and deactivates users in their account-based marketing platform. However, RollWorks requires you to set up SAML SSO first, then work with your Customer Success Manager to configure SCIM—adding friction and delays to what should be a straightforward IT deployment.
This CSM-dependent setup process creates unnecessary bottlenecks for IT teams managing multiple SaaS integrations. While RollWorks does support both Okta and Microsoft Entra ID for SCIM, the requirement for manual coordination with their support team means you can't deploy provisioning on your timeline, and troubleshooting becomes a customer service issue rather than a technical one.
The strategic alternative
RollWorks gates SCIM behind All Paid Packages. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Custom |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages RollWorks accounts manually. Here's what that costs:
The RollWorks pricing problem
RollWorks gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Starter | From $975/month | ||
| Standard | Contact sales | ||
| Professional | Contact sales | ||
| Ultimate | Contact sales |
Note: All paid packages include both SAML SSO and SCIM provisioning at no additional cost.
What this means in practice
While RollWorks doesn't gate SCIM behind premium tiers, the operational requirements create delays:
Additional constraints
Summary of challenges
- RollWorks supports SCIM but only at Custom tier (custom pricing)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What RollWorks actually offers for identity
RollWorks includes SCIM and SAML on all paid packages (Starter at $975/month and up), but the setup process requires significant hands-on involvement:
The identity features work well once configured, but you're required to work with a CSM to complete both SAML and SCIM setup. You must configure SAML before SCIM can be enabled. For teams that just want straightforward automated provisioning without CSM dependency, this adds unnecessary friction to what should be a self-service process.
What IT admins are saying
Community sentiment on RollWorks's SCIM implementation is mixed, with frustration centered on the setup process rather than availability. Common complaints:
- Requiring Customer Success Manager involvement to enable SCIM
- Must configure SAML first before accessing SCIM functionality
- No self-service setup option for basic identity features
- Only supporting one IdP at a time per organization
Having to go through our CSM just to turn on SCIM feels like unnecessary friction for what should be a standard security feature.
The SAML-first requirement makes sense technically, but it adds another dependency to our rollout timeline.
The recurring theme
While RollWorks includes SCIM on all paid plans, the mandatory CSM involvement and multi-step setup process creates deployment delays for teams expecting self-service identity management.
The decision
| Your Situation | Recommendation |
|---|---|
| Small team, starting at $975/month | Use Stitchflow: avoid the CSM coordination overhead |
| Growing marketing org with high turnover | Use Stitchflow: get automated provisioning without vendor dependencies |
| Already on RollWorks, comfortable with CSM setup | Use native SCIM: it's included in your plan |
| Enterprise deployment with complex SSO requirements | Consider native SCIM: work with your CSM for full integration |
| Limited budget, stable team | Manual may work: but monitor for access gaps during campaigns |
The bottom line
RollWorks gates SCIM behind All Paid Packages. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the RollWorks workflow gap
RollWorks gates SCIM behind All Paid Packages, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Custom
Prerequisites
SSO must be configured first
Key limitations
- Must set up SAML before SCIM
- Work with CSM to complete setup
- No JIT provisioning - use SCIM instead
- Only one IdP at a time
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Microsoft Entra ID SSO and SCIM integration documented. Different configuration steps than Okta. SCIM auto-creates and deactivates users.
RollWorks gates SCIM behind All Paid Packages. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the workflow gap in
RollWorks
RollWorks gates SCIM behind All Paid Packages plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.
Start with the free gap diagnostic


