Summary and recommendation
RollWorks includes SCIM provisioning on all paid packages (starting at $975/month), which automatically creates and deactivates users in their account-based marketing platform. However, RollWorks requires you to set up SAML SSO first, then work with your Customer Success Manager to configure SCIM—adding friction and delays to what should be a straightforward IT deployment.
This CSM-dependent setup process creates unnecessary bottlenecks for IT teams managing multiple SaaS integrations. While RollWorks does support both Okta and Microsoft Entra ID for SCIM, the requirement for manual coordination with their support team means you can't deploy provisioning on your timeline, and troubleshooting becomes a customer service issue rather than a technical one.
The strategic alternative
RollWorks gates SCIM behind All Paid Packages. Skip the All Paid Packages plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Custom |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages RollWorks accounts manually. Here's what that costs:
The RollWorks pricing problem
RollWorks gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Starter | From $975/month | ||
| Standard | Contact sales | ||
| Professional | Contact sales | ||
| Ultimate | Contact sales |
Note: All paid packages include both SAML SSO and SCIM provisioning at no additional cost.
What this means in practice
While RollWorks doesn't gate SCIM behind premium tiers, the operational requirements create delays:
Additional constraints
Summary of challenges
- RollWorks supports SCIM but only at Custom tier (custom pricing)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What RollWorks actually offers for identity
RollWorks includes SCIM and SAML on all paid packages (Starter at $975/month and up), but the setup process requires significant hands-on involvement:
The identity features work well once configured, but you're required to work with a CSM to complete both SAML and SCIM setup. You must configure SAML before SCIM can be enabled. For teams that just want straightforward automated provisioning without CSM dependency, this adds unnecessary friction to what should be a self-service process.
What IT admins are saying
Community sentiment on RollWorks's SCIM implementation is mixed, with frustration centered on the setup process rather than availability. Common complaints:
- Requiring Customer Success Manager involvement to enable SCIM
- Must configure SAML first before accessing SCIM functionality
- No self-service setup option for basic identity features
- Only supporting one IdP at a time per organization
Having to go through our CSM just to turn on SCIM feels like unnecessary friction for what should be a standard security feature.
The SAML-first requirement makes sense technically, but it adds another dependency to our rollout timeline.
The recurring theme
While RollWorks includes SCIM on all paid plans, the mandatory CSM involvement and multi-step setup process creates deployment delays for teams expecting self-service identity management.
The decision
| Your Situation | Recommendation |
|---|---|
| Small team, starting at $975/month | Use Stitchflow: avoid the CSM coordination overhead |
| Growing marketing org with high turnover | Use Stitchflow: get automated provisioning without vendor dependencies |
| Already on RollWorks, comfortable with CSM setup | Use native SCIM: it's included in your plan |
| Enterprise deployment with complex SSO requirements | Consider native SCIM: work with your CSM for full integration |
| Limited budget, stable team | Manual may work: but monitor for access gaps during campaigns |
The bottom line
RollWorks includes SCIM on all paid plans, but requires Customer Success Manager involvement to set up and maintain. For marketing teams that want automated provisioning without the vendor coordination overhead, Stitchflow delivers the same automation at flat-rate pricing.
Make RollWorks workflows AI-native
RollWorks gates SCIM behind All Paid Packages. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Custom
Prerequisites
SSO must be configured first
Key limitations
- Must set up SAML before SCIM
- Work with CSM to complete setup
- No JIT provisioning - use SCIM instead
- Only one IdP at a time
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Microsoft Entra ID SSO and SCIM integration documented. Different configuration steps than Okta. SCIM auto-creates and deactivates users.
RollWorks gates SCIM behind All Paid Packages. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Unlock SCIM for
RollWorks
RollWorks gates SCIM behind All Paid Packages plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works


