Snyk SCIM guide

Culture Amp, the employee engagement and people analytics platform, explicitly does not support SCIM provisioning on any plan. This is an intentional design decision - Culture Amp separates authentication (handled via SAML SSO) from employee data management (handled via HRIS integrations). While this approach works for their core HR use case, it creates a significant gap for IT teams managing user lifecycle across multiple SaaS applications through their identity provider. The lack of SCIM support means IT admins cannot automate user provisioning, deprovisioning, or attribute updates through standard identity governance workflows. Since Culture Amp contains sensitive employee feedback data and organizational hierarchy information that affects survey visibility, manual user management creates both security risks and operational overhead. Organizations are forced to rely on separate HRIS integrations or manual processes, breaking the unified provisioning model that most enterprises expect from their SaaS stack.

WordPress does not offer native SCIM provisioning on any plan, including WordPress VIP's enterprise offering that starts at $25,000/year minimum. While WordPress VIP supports SAML 2.0 SSO integration with identity providers like Okta and Entra ID, organizations requiring automated user provisioning must rely on third-party plugins like miniOrange's SCIM solution. This plugin dependency creates a significant gap for enterprise customers who need reliable, automated user lifecycle management across their WordPress ecosystem. The lack of native SCIM support means IT teams face ongoing plugin management overhead, potential security vulnerabilities from third-party code, and the risk of provisioning failures during WordPress updates. For organizations already investing $25K+ annually in WordPress VIP, having to cobble together provisioning through plugins represents a major architectural compromise. SSO alone doesn't address the manual work of creating, updating, and deprovisioning user accounts—leaving IT teams with time-consuming manual processes that don't scale with organizational growth.

Workable, the applicant tracking system used by hiring teams, does not support SCIM provisioning on any plan. While Workable offers SAML 2.0 SSO integration starting with the Standard plan (plus add-on fees) or Premier plan, this only handles authentication—not user lifecycle management. Users granted access through SSO can join the Workable account automatically via JIT provisioning, but they still require manual job assignment and role configuration within the platform. This creates a significant gap for IT teams managing hiring workflows across multiple departments. Without SCIM, administrators must manually provision recruiters and hiring managers, assign them to appropriate job requisitions, and remember to deprovision access when employees change roles or leave. For an ATS platform that handles sensitive candidate data and hiring decisions, this manual process introduces compliance risks and operational overhead that scales poorly as organizations grow.