Summary and recommendation
Spotfire supports SCIM 2.0 provisioning, but only on Enterprise plans that start at $200K+/year for 1,000 users. Teams on Pro ($200/user/month) or Business ($150/user/month) plans cannot access SCIM functionality, forcing a costly upgrade. Additionally, Spotfire's SCIM implementation creates an operational split: users provisioned through SCIM cannot be managed through the Spotfire admin UI, requiring IT teams to maintain separate workflows for SCIM and manually-created users.
For organizations running Pro or Business plans, upgrading to Enterprise solely for provisioning represents a massive cost increase—potentially 10x or more depending on team size. This leaves smaller teams stuck with manual user management, creating security gaps when employees join or leave. SSO alone doesn't solve the provisioning problem; accounts still need manual creation and deactivation.
The strategic alternative
Spotfire gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ❌ | SSO only |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Spotfire accounts manually. Here's what that costs:
The Spotfire pricing problem
Spotfire gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Pro | $200/user/mo (individual) | ||
| Business | $150/user/mo (10+ users) | ||
| Enterprise | Custom ($200K+/year for 1000 users) |
Plan Structure
| Plan | Price | SCIM |
|---|---|---|
| Pro | $200/user/mo (individual) | ❌ |
| Business | $150/user/mo (10+ users) | ❌ |
| Enterprise | Custom ($200K+/year for 1000 users) | ✓ |
What this means in practice
The Enterprise requirement creates a massive pricing cliff. For teams currently on Business plans, SCIM access requires moving to custom Enterprise pricing that often represents a 2-3x cost increase:
| Team Size | Current Business Cost | Estimated Enterprise Cost | Annual Increase |
|---|---|---|---|
| 50 users | $90,000/year | $200,000+/year | +$110,000+ |
| 100 users | $180,000/year | $200,000+/year | +$20,000+ |
| 200 users | $360,000/year | $400,000+/year | +$40,000+ |
Note: Enterprise pricing is custom and varies significantly based on deployment requirements and contract terms.
Additional constraints
Summary of challenges
- Spotfire supports SCIM but only at Enterprise tier (Custom ($200K+/year for 1000 users))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Spotfire doesn't sell SCIM à la carte. It's bundled with Enterprise features that require substantial investment:
Additionally, Spotfire's SCIM implementation has operational limitations: users created via SCIM can't be managed through the standard admin interface, and the system requires OAuth2 token management that adds complexity to your identity workflows.
Stitchflow Insight
The Enterprise tier starts around $200K annually for 1000 users - a significant jump from Business at $150/user/month. If you need enterprise analytics governance anyway, the upgrade makes sense. If you just want automated user provisioning, you're paying for infrastructure and features most teams won't use. We estimate ~60% of Enterprise features are irrelevant for teams that only need SCIM provisioning.
What IT admins are saying
Community sentiment on Spotfire's SCIM implementation reveals significant operational challenges. Common complaints:
- SCIM users cannot be managed through the standard Spotfire admin interface
- Complex OAuth2 authentication requirements create deployment friction
- Enterprise tier pricing puts SCIM out of reach for smaller analytics teams
- Self-hosted server requirement adds infrastructure overhead even for cloud deployments
We had to set up a separate process for SCIM users because they don't show up in the normal admin console. It's like managing two different user systems.
The OAuth2 token management for SCIM is unnecessarily complex compared to other apps. Why can't it just use the same auth as SSO?
The recurring theme
Spotfire's native SCIM creates a dual user management system that complicates administration, while Enterprise pricing barriers force teams to choose between automated provisioning and budget constraints.
The decision
| Your Situation | Recommendation |
|---|---|
| On Pro/Business plans, need SCIM | Use Stitchflow: avoid the massive Enterprise upgrade cost |
| Already on Enterprise with SCIM included | Use native SCIM: you're paying $200K+/year for it |
| Self-hosting Spotfire Server | Evaluate native SCIM: but prepare for OAuth2 complexity |
| Need Enterprise analytics features beyond SCIM | Consider Enterprise: SCIM comes bundled with advanced capabilities |
| Small analytics team, low turnover | Manual may work: but watch for compliance gaps |
The bottom line
Spotfire gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the Spotfire workflow gap
Spotfire gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
None
Key limitations
- SCIM requires Spotfire Server (self-hosted or cloud)
- Users created via SCIM cannot be managed in Spotfire admin UI
- SCIM client must obtain OAuth2 access token for authentication
- Formerly known as TIBCO Spotfire (now Cloud Software Group)
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app
Where to enable
Docs
SWA (Secure Web Authentication) integration only. Native SCIM available on Spotfire Server directly.
Use Stitchflow for automated provisioning.
Close the workflow gap in
Spotfire
Spotfire gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.
Start with the free gap diagnostic
