Summary and recommendation
Spiff supports SCIM provisioning, but there's a catch: Spiff was acquired by Salesforce and now requires integration through the Salesforce ecosystem. This means SCIM provisioning is only available on Enterprise plans with custom pricing, and the provisioning itself is managed through Salesforce's platform rather than directly with Spiff.
For organizations using Spiff's Pro plan ($75/user/month) or seeking straightforward provisioning without Salesforce dependencies, this creates a significant barrier. The Enterprise tier requires custom pricing negotiations with Salesforce, and you're locked into their broader platform architecture. This means what should be a simple SCIM integration becomes tied to Salesforce's complex enterprise sales process and potentially much higher costs.
The strategic alternative
Spiff gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Spiff accounts manually. Here's what that costs:
The Spiff pricing problem
Spiff gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Pro | $75/user/mo | ||
| Enterprise | Custom |
Plan Structure
| Plan | Price | SCIM |
|---|---|---|
| Pro | $75/user/mo | ❌ |
| Enterprise | Custom | ✓ (via Salesforce) |
Note: SCIM provisioning is handled through Salesforce's identity platform since the acquisition. This requires coordination with Salesforce sales and potentially additional Salesforce licensing.
What this means in practice
The Salesforce integration creates several practical barriers:
Additional constraints
Summary of challenges
- Spiff supports SCIM but only at Enterprise tier (Custom)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Spiff doesn't offer standalone SCIM. Since Salesforce acquired Spiff, identity management is bundled through Salesforce's Sales Cloud platform as an add-on:
Stitchflow Insight
This creates a significant barrier: you're not just upgrading Spiff, you're buying into the entire Salesforce ecosystem. If your team already uses Salesforce CRM, this integration may provide value. But if you just need automated user provisioning for your sales compensation tool, you're paying for enterprise CRM capabilities you won't use. We estimate ~80% of the Salesforce Sales Cloud add-on features are irrelevant for teams that only want SCIM provisioning.
What IT admins are saying
Community sentiment on Spiff's identity management is mixed, with confusion around the Salesforce acquisition dominating discussions. Common complaints:
- Uncertainty about whether existing Spiff licenses include identity features
- Being forced into Salesforce's complex pricing model for what was once standalone software
- Lack of clear documentation on provisioning options post-acquisition
- Enterprise pricing now requiring Salesforce sales conversations instead of transparent costs
We were evaluating Spiff before the Salesforce acquisition, but now everything goes through their enterprise sales process. Can't even get a straight answer on pricing.
Since Spiff became part of Salesforce, our renewal conversation turned into a pitch for Sales Cloud add-ons we don't need. Just want to keep our commission software working.
The recurring theme
The Salesforce acquisition has created pricing opacity and complexity where there was once straightforward SaaS pricing, forcing IT teams into enterprise sales cycles for basic identity integration.
The decision
| Your Situation | Recommendation |
|---|---|
| On Pro plan, need SCIM | Use Stitchflow: avoid the costly Enterprise upgrade |
| Want SCIM without Salesforce ecosystem lock-in | Use Stitchflow: maintain independence from SF platform |
| Already integrated with Salesforce Sales Cloud | Use native SCIM: leverage existing Salesforce investment |
| Need Enterprise features beyond SCIM | Evaluate Salesforce Enterprise: SCIM comes bundled |
| Small team, low employee turnover | Manual may work: but watch for scaling issues |
The bottom line
Spiff gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the Spiff workflow gap
Spiff gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
None
Key limitations
- Now part of Salesforce ecosystem - requires Salesforce for identity integration
- Pricing tied to Salesforce Sales Cloud add-on model
- Provisioning managed through Salesforce platform
- Enterprise features require Salesforce contact
Documentation not available.
Close the workflow gap in
Spiff
Spiff gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.
Start with the free gap diagnostic
