Stitchflow
SonarQube logo

SonarQube SCIM guide

Native SCIM

How to automate SonarQube user provisioning, and what it actually costs

Native SCIM requires Enterprise Edition plan

Summary and recommendation

SonarQube supports native SCIM 2.0 provisioning, but only on Enterprise Edition—which costs $35,700/year for 5M lines of code before discounts. This creates a significant barrier: teams on Developer Edition ($2,500-$10,000/year) must pay 3-14x more just to unlock automated user provisioning. Additionally, SonarQube's SCIM implementation requires your instance to be publicly accessible, and once enabled, all user management becomes read-only through the SonarQube interface.

For development teams managing code quality across growing organizations, this pricing structure creates a problematic gap. Manual user provisioning in a DevOps tool means developers wait for access, security teams can't enforce consistent group memberships, and offboarding becomes a compliance risk. SSO with just-in-time provisioning helps with login, but doesn't solve the fundamental problem of keeping user access synchronized with your identity provider.

The strategic alternative

SonarQube gates SCIM behind Enterprise Edition. Skip the Enterprise Edition plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages SonarQube accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The SonarQube pricing problem

SonarQube gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Developer$10,000/year
Enterprise$35,700/year

Note: Pricing shown is list price before potential enterprise discounts of 39-46%. All pricing is per-instance, per-year based on lines of code analyzed.

What this means in practice

The jump from Developer to Enterprise Edition represents a substantial cost increase:

Code Base SizeDeveloper PriceEnterprise PriceSCIM Upgrade Cost
500K LOC$2,500/year~$7,100/year*+$4,600/year
2M LOC$10,000/year~$19,300/year*+$9,300/year
5M LOC$10,000/year$35,700/year+$25,700/year

Estimated based on LOC scaling from available pricing data *Developer Edition caps at 2M LOC; larger codebases require Enterprise

Additional constraints

SAML prerequisite
SCIM cannot be configured without SAML SSO already in place, adding implementation complexity.
Public URL requirement
Your SonarQube instance must be publicly accessible for SCIM to function, which may conflict with security policies.
User management lockdown
Once SCIM is enabled, users become read-only in the SonarQube interface—all management must happen through your IdP.
Instance-based licensing
Each SonarQube instance requires its own Enterprise license, making multi-environment setups expensive.

Summary of challenges

  • SonarQube supports SCIM but only at Enterprise tier (custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

SonarQube doesn't sell SCIM separately. It's bundled with Enterprise Edition features that push the total cost to $35,700/year for 5M lines of code:

SCIM 2.0 automated provisioning
SAML 2.0 single sign-on (SSO)
Advanced security features (portfolio security, security hotspots)
Enterprise-grade governance (quality gates, branch analysis)
Portfolio management and reporting
Enhanced support and SLA
Advanced administration controls

The challenge: SCIM requires your SonarQube instance to be publicly accessible, and users become read-only once SCIM is enabled. You're also paying enterprise prices even if you only need basic code quality scanning with automated user management.

Stitchflow Insight

For teams that just want SCIM provisioning without the full enterprise feature set, you're paying for capabilities you likely won't use. We estimate ~60% of Enterprise Edition features are irrelevant for organizations that simply need automated user provisioning for their development teams.

What IT admins are saying

Community sentiment on SonarQube's SCIM requirements reveals significant frustration with the Enterprise Edition paywall. Common complaints:

While specific community quotes weren't available in recent discussions, the pricing structure speaks volumes - teams face a massive jump from Developer Edition ($10,000 for 2M LOC) to Enterprise Edition just to get basic identity automation.

  • Being locked out of SCIM unless you upgrade to Enterprise Edition ($35,700/year for 5M LOC)
  • The requirement for publicly accessible base URLs, creating security concerns for internal deployments
  • Users becoming read-only when SCIM is enabled, limiting local admin flexibility
  • Having to configure SAML before SCIM can even be set up, adding deployment complexity

The recurring theme

SonarQube gates essential IT security features behind their highest-priced tier, forcing organizations to pay enterprise prices regardless of their actual code volume or team size needs.

The decision

Your SituationRecommendation
On Developer Edition, need SCIMUse Stitchflow: avoid the $33K+/year Enterprise upgrade
Enterprise Edition too expensive for your LOC volumeUse Stitchflow: get SCIM without the tier jump
Can't expose SonarQube publicly for SCIMUse Stitchflow: works with private instances
Already on Enterprise EditionUse native SCIM: you're paying for it
Small dev team, infrequent changesManual may work: but watch for security gaps

The bottom line

SonarQube's SCIM requires Enterprise Edition, creating a massive cost barrier for teams on Developer plans. For organizations that need provisioning automation without the Enterprise upgrade or public URL requirement, Stitchflow delivers the same outcomes at a fraction of the cost.

Make SonarQube workflows AI-native

SonarQube gates SCIM behind Enterprise Edition. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise Edition upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SCIM requires Enterprise Edition
  • Base URL must be publicly accessible for SCIM
  • Users become read-only when SCIM enabled
  • SAML must be configured before SCIM

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → SonarQube → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Full SCIM 2.0 support via Microsoft Entra. Syncs every 40 minutes.

SonarQube gates SCIM behind Enterprise Edition. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
SonarQube

SonarQube gates SCIM behind Enterprise Edition plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade, avoiding a 257% markup.

See how it works
Admin Console
Directory
Applications
SonarQube logo
SonarQube
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide