Summary and recommendation
Spotfire supports SCIM 2.0 provisioning, but only on Enterprise plans that start at $200K+/year for 1,000 users. Teams on Pro ($200/user/month) or Business ($150/user/month) plans cannot access SCIM functionality, forcing a costly upgrade. Additionally, Spotfire's SCIM implementation creates an operational split: users provisioned through SCIM cannot be managed through the Spotfire admin UI, requiring IT teams to maintain separate workflows for SCIM and manually-created users.
For organizations running Pro or Business plans, upgrading to Enterprise solely for provisioning represents a massive cost increase—potentially 10x or more depending on team size. This leaves smaller teams stuck with manual user management, creating security gaps when employees join or leave. SSO alone doesn't solve the provisioning problem; accounts still need manual creation and deactivation.
The strategic alternative
Spotfire gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ❌ | SSO only |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Spotfire accounts manually. Here's what that costs:
The Spotfire pricing problem
Spotfire gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Pro | $200/user/mo (individual) | ||
| Business | $150/user/mo (10+ users) | ||
| Enterprise | Custom ($200K+/year for 1000 users) |
Plan Structure
| Plan | Price | SCIM |
|---|---|---|
| Pro | $200/user/mo (individual) | ❌ |
| Business | $150/user/mo (10+ users) | ❌ |
| Enterprise | Custom ($200K+/year for 1000 users) | ✓ |
What this means in practice
The Enterprise requirement creates a massive pricing cliff. For teams currently on Business plans, SCIM access requires moving to custom Enterprise pricing that often represents a 2-3x cost increase:
| Team Size | Current Business Cost | Estimated Enterprise Cost | Annual Increase |
|---|---|---|---|
| 50 users | $90,000/year | $200,000+/year | +$110,000+ |
| 100 users | $180,000/year | $200,000+/year | +$20,000+ |
| 200 users | $360,000/year | $400,000+/year | +$40,000+ |
Note: Enterprise pricing is custom and varies significantly based on deployment requirements and contract terms.
Additional constraints
Summary of challenges
- Spotfire supports SCIM but only at Enterprise tier (Custom ($200K+/year for 1000 users))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Spotfire doesn't sell SCIM à la carte. It's bundled with Enterprise features that require substantial investment:
Additionally, Spotfire's SCIM implementation has operational limitations: users created via SCIM can't be managed through the standard admin interface, and the system requires OAuth2 token management that adds complexity to your identity workflows.
Stitchflow Insight
The Enterprise tier starts around $200K annually for 1000 users - a significant jump from Business at $150/user/month. If you need enterprise analytics governance anyway, the upgrade makes sense. If you just want automated user provisioning, you're paying for infrastructure and features most teams won't use. We estimate ~60% of Enterprise features are irrelevant for teams that only need SCIM provisioning.
What IT admins are saying
Community sentiment on Spotfire's SCIM implementation reveals significant operational challenges. Common complaints:
- SCIM users cannot be managed through the standard Spotfire admin interface
- Complex OAuth2 authentication requirements create deployment friction
- Enterprise tier pricing puts SCIM out of reach for smaller analytics teams
- Self-hosted server requirement adds infrastructure overhead even for cloud deployments
We had to set up a separate process for SCIM users because they don't show up in the normal admin console. It's like managing two different user systems.
The OAuth2 token management for SCIM is unnecessarily complex compared to other apps. Why can't it just use the same auth as SSO?
The recurring theme
Spotfire's native SCIM creates a dual user management system that complicates administration, while Enterprise pricing barriers force teams to choose between automated provisioning and budget constraints.
The decision
| Your Situation | Recommendation |
|---|---|
| On Pro/Business plans, need SCIM | Use Stitchflow: avoid the massive Enterprise upgrade cost |
| Already on Enterprise with SCIM included | Use native SCIM: you're paying $200K+/year for it |
| Self-hosting Spotfire Server | Evaluate native SCIM: but prepare for OAuth2 complexity |
| Need Enterprise analytics features beyond SCIM | Consider Enterprise: SCIM comes bundled with advanced capabilities |
| Small analytics team, low turnover | Manual may work: but watch for compliance gaps |
The bottom line
Spotfire's Enterprise-only SCIM means jumping from $150-200/user/month to a $200K+/year commitment just for provisioning. For organizations that need automated user management without the massive Enterprise price tag, Stitchflow delivers SCIM-level provisioning at a fraction of the cost.
Make Spotfire workflows AI-native
Spotfire gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
None
Key limitations
- SCIM requires Spotfire Server (self-hosted or cloud)
- Users created via SCIM cannot be managed in Spotfire admin UI
- SCIM client must obtain OAuth2 access token for authentication
- Formerly known as TIBCO Spotfire (now Cloud Software Group)
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app
Where to enable
Docs
SWA (Secure Web Authentication) integration only. Native SCIM available on Spotfire Server directly.
Use Stitchflow for automated provisioning.
Unlock SCIM for
Spotfire
Spotfire gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works
