Summary and recommendation
Rubrik supports native SCIM 2.0 provisioning, but only for customers on the Enterprise tier, which runs ~$57K-$160K annually. Organizations on Foundation or Business plans—which already involve custom enterprise pricing—must upgrade to Enterprise specifically to unlock automated user provisioning. This creates a significant cost barrier for mid-market organizations that need backup orchestration but don't require Enterprise-level features like the $10M ransomware recovery warranty.
The pricing gap between Business and Enterprise plans can easily exceed $50K annually, making automated provisioning one of the most expensive SCIM implementations in the IT operations category. For teams managing Rubrik access across multiple departments or rotating project teams, manual user management becomes a bottleneck that undermines the platform's operational efficiency benefits.
The strategic alternative
Rubrik gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ❌ | SSO only |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Rubrik accounts manually. Here's what that costs:
The Rubrik pricing problem
Rubrik gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Foundation | Custom pricing | ||
| Business | Custom pricing | ||
| Enterprise | ~$57K-$160K/year |
Plan Structure
| Plan | Price | SCIM |
|---|---|---|
| Foundation | Custom pricing | ❌ |
| Business | Custom pricing | ❌ |
| Enterprise | ~$57K-$160K/year | ✓ |
Note: Rubrik uses custom pricing across all tiers. Enterprise pricing averages around $57K annually but can reach $160K+ depending on deployment size and requirements.
What this means in practice
The Enterprise tier requirement creates substantial cost barriers:
Unlike per-seat SaaS pricing where you can calculate upgrade costs, Rubrik's infrastructure-focused model means the full Enterprise tier cost becomes the provisioning tax.
Additional constraints
Summary of challenges
- Rubrik supports SCIM but only at Enterprise tier (Enterprise (~$57K/year avg, up to $160K))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Rubrik doesn't sell SCIM à la carte. It's bundled with their Enterprise tier and comprehensive data security platform:
Stitchflow Insight
The Enterprise tier averages $57K annually but can reach $160K depending on data volume and features. If you need enterprise-grade data protection and recovery, the upgrade makes sense. If you just want automated user provisioning for basic backup management, you're paying for a comprehensive security platform you may not fully utilize. We estimate ~80% of Enterprise features are irrelevant for teams that only need SCIM for user management.
What IT admins are saying
Community sentiment on Rubrik's SCIM implementation reveals frustration with enterprise-only availability and complex pricing structures. Common complaints:
- SCIM locked behind Enterprise tier with custom pricing averaging $57K-$160K annually
- No automated provisioning support for Microsoft Entra ID despite SSO availability
- Hardware appliance costs starting around $100K creating additional budget barriers
- SP-initiated SSO only, limiting flexibility for identity workflows
The enterprise-only requirement for SCIM means we're paying for a lot of backup features we don't need just to get basic user provisioning.
We have Azure SSO working fine, but there's no automated user management - everything has to be done manually or through custom scripting.
The recurring theme
Rubrik treats SCIM as an enterprise-exclusive feature, forcing organizations into expensive tiers and leaving Entra ID users without automated provisioning options entirely.
The decision
| Your Situation | Recommendation |
|---|---|
| On Foundation/Business, need SCIM | Use Stitchflow: avoid the $57K+ Enterprise upgrade |
| Already on Enterprise with SCIM | Use native SCIM: you're paying for it |
| Using Entra ID as your IdP | Use Stitchflow: no documented SCIM support from Rubrik |
| Need Enterprise features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with advanced security |
| Small security team, low user churn | Manual may be tolerable: but creates security gaps |
The bottom line
Rubrik locks SCIM behind Enterprise tier pricing that averages $57K/year (up to $160K), making it cost-prohibitive for smaller security operations. For teams that need provisioning automation without the massive tier upgrade, Stitchflow delivers SCIM-level functionality at a fraction of the cost.
Make Rubrik workflows AI-native
Rubrik gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
None
Key limitations
- RSC supports multiple IdPs with SAML 2.0
- SP-initiated SSO only
- Hardware appliance pricing starts around $100K
- Enterprise Edition required for advanced security features
- $10M ransomware recovery warranty for Enterprise customers
- No free trial available
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Docs
Supports Group Linking, Schema Discovery, and Attribute Writeback
Rubrik gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app
Where to enable
Azure SSO via non-gallery enterprise application; no automated SCIM provisioning documented
Use Stitchflow for automated provisioning.
Unlock SCIM for
Rubrik
Rubrik gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works
