Summary and recommendation
Sana Labs supports native SCIM 2.0 provisioning, but only on Enterprise plans with custom pricing and a minimum 300-user license requirement. This creates a significant barrier: even the lower Business tier starts at $13/user/month for 300 users minimum ($47,000/year base), while Enterprise pricing is entirely custom and typically much higher. The SCIM implementation is also one-way only—your IdP can provision users to Sana, but changes made within Sana won't sync back to your identity system.
This pricing structure forces smaller organizations into expensive enterprise contracts just to enable basic automated provisioning. For a 50-person team, you're paying for 300 licenses you don't need, plus enterprise-tier pricing, often resulting in $60,000+ annually just to avoid manual user management. The one-way SCIM limitation also creates data consistency issues, requiring manual reconciliation between Sana and your IdP.
The strategic alternative
Sana Labs gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Sana Labs accounts manually. Here's what that costs:
The Sana Labs pricing problem
Sana Labs gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Pro | N/A | ||
| Business (Core) | $13/user/mo (min 300 users) | ||
| Enterprise | Custom pricing |
Note: Business tier starts at $3,900/month ($46,800/year) due to 300-user minimum but includes no identity management features.
What this means in practice
The Enterprise tier requirement creates a significant barrier:
For teams on Business tier: Must upgrade to Enterprise for any identity management capabilities. With the 300-user minimum already in place ($46,800/year base), Enterprise pricing adds substantial additional cost through custom negotiation.
For smaller teams: The 300-user minimum on Business tier ($46,800/year) means teams under 300 users pay for unused seats even before considering Enterprise upgrade costs.
No middle ground: Unlike competitors that offer basic SSO on mid-tier plans, Sana bundles all identity features exclusively in Enterprise.
Additional constraints
Summary of challenges
- Sana Labs supports SCIM but only at Enterprise tier (Custom)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Sana Labs doesn't sell SCIM à la carte. It's bundled with their Enterprise plan, which requires custom pricing and includes:
The catch: Enterprise requires a minimum commitment that typically starts around $50K+ annually. If you're already on the Core plan at $13/user/month (300 user minimum = $47K/year), you're looking at a significant price jump for provisioning capabilities.
The bigger limitation is that Sana's SCIM is one-way only - your IdP can push users to Sana, but changes made in Sana won't sync back. This creates potential data inconsistencies that require manual cleanup.
Stitchflow Insight
We estimate ~60% of Enterprise features are irrelevant for teams that primarily need automated user provisioning, making this an expensive solution for basic identity management needs.
What IT admins are saying
Community sentiment on Sana Labs's SCIM pricing reveals significant frustration with accessibility barriers. Common complaints:
- Enterprise-only SCIM forcing teams to skip multiple pricing tiers
- 300-user minimum license requirement creating ~$47K annual barrier to entry
- One-way provisioning limitations despite premium pricing
- Learning platforms treating identity automation as luxury feature
Another learning platform that gates SCIM behind Enterprise. We're a 150-person company - we don't need custom contracts and account managers, we just need our users provisioned automatically.
The 300 user minimum is brutal for mid-sized companies. We have 200 employees but need to pay for 300 licenses just to get basic SCIM provisioning. That's an extra $15K we're throwing away.
The recurring theme
Learning platforms like Sana Labs create artificial barriers to identity automation, forcing mid-market companies to either overpay significantly or manage users manually.
The decision
| Your Situation | Recommendation |
|---|---|
| On Core/Business plan, need SCIM | Use Stitchflow: avoid the Enterprise upgrade and $47K+ minimum |
| Small team (<300 users) needing provisioning | Use Stitchflow: bypass the 300-user minimum entirely |
| Already on Enterprise with custom pricing | Use native SCIM: you're likely paying for it already |
| Need Enterprise features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with advanced analytics |
| Minimal user changes, small learning footprint | Manual may suffice: but watch for compliance gaps |
The bottom line
Sana Labs gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the Sana Labs workflow gap
Sana Labs gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
None
Key limitations
- SCIM and SSO only available on Enterprise plan
- SCIM is one-way only (IdP to Sana, no push back)
- Minimum 300 user license requirement (~$47k/year minimum)
- Supports SCIM Enterprise User Schema extension
- HR system connectors available (Workday, BambooHR, etc.)
Documentation not available.
Close the workflow gap in
Sana Labs
Sana Labs gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.
Start with the free gap diagnostic
