Summary and recommendation
SmartRecruiters supports SCIM provisioning, but only for customers on Corporate or Enterprise plans (starting around $14,995 annually). The integration works well with Okta through their native API connector, supporting automated user creation, updates, and group management. However, Entra ID users are left out entirely—Microsoft's integration only supports SSO, requiring manual user creation in SmartRecruiters before authentication works.
This creates a problematic gap for organizations using Entra ID or those on SmartRecruiters' lower-tier plans. Without automated provisioning, IT teams must manually manage recruiting team access—a compliance risk when employees join, change roles, or leave. SSO alone doesn't solve this: users still need to be manually created in SmartRecruiters before they can authenticate, defeating the purpose of centralized identity management.
The strategic alternative
SmartRecruiters gates SCIM behind Corporate/Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ❌ | SSO only |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages SmartRecruiters accounts manually. Here's what that costs:
The SmartRecruiters pricing problem
SmartRecruiters gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Standard | From $390/mo (10 users) | ||
| Corporate/Enterprise | Custom (starts ~$15K annually) |
Plan Structure
| Plan | Price | SCIM |
|---|---|---|
| Standard | From $390/mo (10 users) | ❌ |
| Corporate/Enterprise | Custom (starts ~$15K annually) | ✓ |
What this means in practice
SmartRecruiters doesn't publish Corporate/Enterprise pricing, but industry reports suggest:
For organizations currently on Standard plans, adding SCIM provisioning means:
Additional constraints
Summary of challenges
- SmartRecruiters supports SCIM but only at Enterprise tier (Custom)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
SmartRecruiters doesn't sell SCIM à la carte. It's bundled with Corporate/Enterprise plan features:
The catch: SCIM only works with Okta. Microsoft Entra ID gets SSO but no automated provisioning - users must still be created manually in SmartRecruiters before they can authenticate.
Stitchflow Insight
If you need enterprise recruiting features anyway, the upgrade may justify itself. But if you just want automated user provisioning across multiple IdPs, you're paying enterprise prices for a solution that only works with one provider. We estimate ~60% of Corporate/Enterprise features are irrelevant for teams that primarily need reliable SCIM provisioning.
What IT admins are saying
Community sentiment on SmartRecruiters's SCIM limitations reveals significant frustration with platform restrictions. Common complaints:
- Corporate Plan requirement locks out smaller recruiting teams
- Entra ID users completely excluded from automatic provisioning
- Manual user creation still required even with SSO enabled
- Limited API documentation makes troubleshooting difficult
Having to manually create users in SmartRecruiters before they can use SSO defeats the entire purpose of identity automation.
The Corporate Plan pricing just for SCIM feels like extortion when you're a 50-person company that just needs basic user sync.
The recurring theme
SmartRecruiters forces expensive plan upgrades for basic provisioning, while completely abandoning Entra ID users who need manual workarounds.
The decision
| Your Situation | Recommendation |
|---|---|
| On Essential/Professional, need SCIM | Use Stitchflow: avoid the $15K+ Enterprise upgrade |
| Already on Corporate/Enterprise plan | Use native SCIM: you're paying for it |
| Using Entra ID as primary IdP | Use Stitchflow: Microsoft only supports SSO |
| High-volume recruiting, complex workflows | Evaluate Enterprise: SCIM comes with advanced features |
| Small recruiting team, infrequent hiring | Manual may work: but watch for onboarding delays |
The bottom line
SmartRecruiters gates SCIM behind Corporate/Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the SmartRecruiters workflow gap
SmartRecruiters gates SCIM behind Corporate/Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
None
Key limitations
- Provisioning requires Corporate Plan or higher
- API key required for Okta provisioning setup
- Entra ID supports SSO only, not automatic provisioning
- SmartRecruiters supports limited set of user fields
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Docs
Supports Group Linking, Schema Discovery, and Attribute Writeback. Requires SmartRecruiters Admin account in Corporate Plan.
SmartRecruiters gates SCIM behind Corporate/Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app
Where to enable
SSO only (SP and IDP initiated). Users must be created manually in SmartRecruiters before SSO.
Use Stitchflow for automated provisioning.
Close the workflow gap in
SmartRecruiters
SmartRecruiters gates SCIM behind Corporate/Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.
Start with the free gap diagnostic
