Stitchflow
RollWorks logo

RollWorks SCIM guide

Native SCIM

How to automate RollWorks user provisioning, and what it actually costs

Native SCIM requires All Paid Packages plan

Summary and recommendation

RollWorks includes SCIM provisioning on all paid packages (starting at $975/month), which automatically creates and deactivates users in their account-based marketing platform. However, RollWorks requires you to set up SAML SSO first, then work with your Customer Success Manager to configure SCIM—adding friction and delays to what should be a straightforward IT deployment.

This CSM-dependent setup process creates unnecessary bottlenecks for IT teams managing multiple SaaS integrations. While RollWorks does support both Okta and Microsoft Entra ID for SCIM, the requirement for manual coordination with their support team means you can't deploy provisioning on your timeline, and troubleshooting becomes a customer service issue rather than a technical one.

The strategic alternative

RollWorks gates SCIM behind All Paid Packages. Skip the All Paid Packages plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredCustom
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages RollWorks accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The RollWorks pricing problem

RollWorks gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
StarterFrom $975/month
StandardContact sales
ProfessionalContact sales
UltimateContact sales

Note: All paid packages include both SAML SSO and SCIM provisioning at no additional cost.

What this means in practice

While RollWorks doesn't gate SCIM behind premium tiers, the operational requirements create delays:

CSM dependency
Every SCIM setup requires working directly with your Customer Success Manager, adding coordination overhead and potential delays.
Sequential setup
You must fully configure and test SAML SSO before beginning SCIM provisioning—no parallel implementation possible.
Sales-gated pricing
With only the Starter tier showing transparent pricing, most organizations need to engage sales for Standard/Professional/Ultimate pricing, extending procurement timelines.

Additional constraints

Single IdP limitation
Only one identity provider can be configured at a time, blocking hybrid or multi-subsidiary deployments.
No JIT fallback
RollWorks explicitly disables JIT provisioning when SCIM is enabled, requiring full SCIM implementation for any automated user management.
CSM bottleneck
Technical setup depends on CSM availability and expertise, which can vary significantly across different Customer Success Managers.

Summary of challenges

  • RollWorks supports SCIM but only at Custom tier (custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What RollWorks actually offers for identity

RollWorks includes SCIM and SAML on all paid packages (Starter at $975/month and up), but the setup process requires significant hands-on involvement:

SCIM automated provisioning (create/deactivate users only)
SAML 2.0 single sign-on
Customer Success Manager-assisted setup
Support for Okta, Microsoft Entra ID, and generic SAML IdPs
Account-based marketing platform features
Media buying and campaign management tools
Attribution and analytics dashboards

The identity features work well once configured, but you're required to work with a CSM to complete both SAML and SCIM setup. You must configure SAML before SCIM can be enabled. For teams that just want straightforward automated provisioning without CSM dependency, this adds unnecessary friction to what should be a self-service process.

What IT admins are saying

Community sentiment on RollWorks's SCIM implementation is mixed, with frustration centered on the setup process rather than availability. Common complaints:

  • Requiring Customer Success Manager involvement to enable SCIM
  • Must configure SAML first before accessing SCIM functionality
  • No self-service setup option for basic identity features
  • Only supporting one IdP at a time per organization

Having to go through our CSM just to turn on SCIM feels like unnecessary friction for what should be a standard security feature.

IT Director, SaaS Company

The SAML-first requirement makes sense technically, but it adds another dependency to our rollout timeline.

Identity Administrator

The recurring theme

While RollWorks includes SCIM on all paid plans, the mandatory CSM involvement and multi-step setup process creates deployment delays for teams expecting self-service identity management.

The decision

Your SituationRecommendation
Small team, starting at $975/monthUse Stitchflow: avoid the CSM coordination overhead
Growing marketing org with high turnoverUse Stitchflow: get automated provisioning without vendor dependencies
Already on RollWorks, comfortable with CSM setupUse native SCIM: it's included in your plan
Enterprise deployment with complex SSO requirementsConsider native SCIM: work with your CSM for full integration
Limited budget, stable teamManual may work: but monitor for access gaps during campaigns

The bottom line

RollWorks includes SCIM on all paid plans, but requires Customer Success Manager involvement to set up and maintain. For marketing teams that want automated provisioning without the vendor coordination overhead, Stitchflow delivers the same automation at flat-rate pricing.

Make RollWorks workflows AI-native

RollWorks gates SCIM behind All Paid Packages. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No All Paid Packages upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Custom

Prerequisites

SSO must be configured first

Key limitations

  • Must set up SAML before SCIM
  • Work with CSM to complete setup
  • No JIT provisioning - use SCIM instead
  • Only one IdP at a time

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → RollWorks → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Microsoft Entra ID SSO and SCIM integration documented. Different configuration steps than Okta. SCIM auto-creates and deactivates users.

RollWorks gates SCIM behind All Paid Packages. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
RollWorks

RollWorks gates SCIM behind All Paid Packages plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
RollWorks logo
RollWorks
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide