Stitchflow
Sourcegraph logo

Sourcegraph SCIM guide

Native SCIM

How to automate Sourcegraph user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Sourcegraph supports native SCIM 2.0 provisioning, but only on Enterprise plans starting at $59/user/month. While the SCIM implementation covers standard user lifecycle operations (create, update, deactivate), it has notable limitations: it's only tested with Okta and Microsoft Entra ID, has a known validator issue with Entra ID that may cause confusion, and requires network connectivity that can complicate private deployments.

For engineering teams managing sensitive code access, these limitations create operational friction. The pricing barrier is significant—teams on lower tiers face a substantial cost increase to unlock automated provisioning. Given that code search platforms contain proprietary intellectual property, manual user management creates security risks when developers join or leave the organization.

The strategic alternative

Stitchflow provides SCIM-level provisioning through resilient browser automation for Sourcegraph across all plans and identity providers. Works with any IdP (Okta, Entra, Google Workspace, OneLogin) without the network connectivity requirements or validator issues. Flat pricing under $5K/year, regardless of team size.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OIDC, OAuth
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Sourcegraph accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Sourcegraph pricing problem

Sourcegraph gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Enterprise Starter$19/user/mo (up to 50 devs)
Enterprise$59/user/mo

Note: Both Enterprise tiers include SCIM, but Enterprise Starter is limited to 50 developers, 100 repositories, and 5GB storage. Most growing engineering teams quickly outgrow these constraints.

What this means in practice

For teams exceeding Enterprise Starter limits, the jump to full Enterprise creates substantial costs:

Team SizeAnnual Enterprise Costvs. Basic Code Search
75 developers$53,100/year3x cost increase
150 developers$106,200/year3x cost increase
300 developers$212,400/year3x cost increase

Calculation: $59 × users × 12 months. "Basic code search" refers to hypothetical lower-tier pricing without enterprise features.

Additional constraints

Infrastructure requirements
SCIM provider needs network connectivity to your Sourcegraph instance, which may require Okta provisioning agent for private deployments.
Limited IdP testing
Only officially tested with Okta and Microsoft Entra ID, though generic SCIM 2.0 is supported.
Azure validator issue
Known problem where Microsoft Entra ID validator fails during setup (doesn't impact actual provisioning but causes confusion).
SSO prerequisite
Must configure IdP as authentication provider before enabling SCIM provisioning.

Summary of challenges

  • Sourcegraph supports SCIM but only at Enterprise tier ($59/user/mo)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Sourcegraph doesn't sell SCIM à la carte. It's bundled with Enterprise features at $59/user/month:

SCIM 2.0 automated provisioning
SAML 2.0 and OIDC single sign-on
Advanced security and compliance controls
Batch changes for large-scale code modifications
Code insights and analytics
Priority support and SLA guarantees
Advanced search capabilities
Repository permissions and access controls

Stitchflow Insight

The jump from free/starter to Enterprise is significant—you're paying for code intelligence features that may exceed your team's needs. If you just want to automate developer onboarding and offboarding for code search access, you're buying enterprise-grade code analysis tools you may never use. We estimate ~60% of Enterprise features are overkill for teams that only need identity management for their code search platform.

What IT admins are saying

Community sentiment on Sourcegraph's SCIM implementation is mixed, with praise for core functionality but frustration over Enterprise pricing barriers and IdP limitations. Common complaints:

  • Enterprise tier requirement creates a $59/user/month barrier for smaller dev teams
  • Limited to only Okta and Microsoft Entra ID (officially tested)
  • Microsoft Entra ID validator failures cause setup confusion despite working provisioning
  • Private deployment complexity requiring additional Okta provisioning agents

The Azure validator issue is annoying - it throws errors during setup even though the actual provisioning works fine. Makes troubleshooting confusing.

Reddit r/sysadmin

We're a 30-person engineering team and can't justify $1,770/month just to get automated user provisioning. The Enterprise Starter caps at 50 devs but we need room to grow.

DevOps Engineer, HackerNews

The recurring theme

Sourcegraph gates essential identity automation behind expensive Enterprise pricing, while IdP compatibility issues create unnecessary friction for common enterprise identity providers.

The decision

Your SituationRecommendation
Not on Enterprise, need SCIMUse Stitchflow: avoid the $59/user/mo Enterprise upgrade
On Enterprise Starter (50 dev limit), growing teamUse Stitchflow: get SCIM without full Enterprise costs
Already on EnterpriseUse native SCIM: you're paying for it already
Private Sourcegraph instance with network restrictionsUse Stitchflow: simpler than managing Okta provisioning agents
Using non-Okta/Entra IdPsUse Stitchflow: guaranteed compatibility vs. untested native support

The bottom line

Sourcegraph gates SCIM behind its $59/user/mo Enterprise tier, creating a substantial cost barrier for teams that just need provisioning automation. For development teams wanting secure code access management without the Enterprise price tag, Stitchflow delivers the same automation at a fraction of the cost.

Automate Sourcegraph without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Sourcegraph at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Only tested with Okta and Microsoft Entra ID
  • Known issue: Microsoft Entra ID validator fails (doesn't impact provisioning)
  • SCIM provider needs network connectivity to Sourcegraph instance
  • Private instances may need Okta provisioning agent

Unlock SCIM for
Sourcegraph

Sourcegraph gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee.

See how it works
Admin Console
Directory
Applications
Sourcegraph logo
Sourcegraph
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide