Summary and recommendation
ThoughtSpot supports SCIM 2.0 for automated user provisioning, but only on Enterprise plans with custom pricing that typically runs $100,000-$500,000/year. While the SCIM implementation covers core functionality (create, update, deactivate users and sync groups), it has operational gotchas: SCIM tokens expire every 6 months requiring manual rotation, and you cannot use SCIM provisioning alongside SAML group mapping simultaneously.
For organizations on Pro plans ($50/user/month), upgrading to Enterprise just for SCIM means moving from transparent pricing to custom enterprise contracts that often double or triple your annual spend. A 100-user deployment jumps from $60,000/year on Pro to $200,000-$350,000/year on Enterprise - adding $140,000+ annually primarily to unlock automated provisioning.
The strategic alternative
ThoughtSpot gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages ThoughtSpot accounts manually. Here's what that costs:
The ThoughtSpot pricing problem
ThoughtSpot gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Essentials | $25/user/mo (5-50 users) | ||
| Pro | $50/user/mo | ||
| Enterprise | Custom pricing |
Plan Structure
| Plan | Price | SCIM |
|---|---|---|
| Essentials | $25/user/mo (5-50 users) | ❌ |
| Pro | $50/user/mo | ❌ |
| Enterprise | Custom pricing | ✓ |
Note: Enterprise pricing is not publicly disclosed. Industry reports indicate average annual costs of $140,000, with typical ranges from $100,000-$500,000 depending on deployment size and data volume requirements.
What this means in practice
ThoughtSpot's Enterprise tier represents a significant cost jump from Pro pricing:
| Team Size | Pro Annual Cost | Estimated Enterprise Cost | Premium |
|---|---|---|---|
| 25 users | $15,000 | $100,000-$150,000 | +$85,000-$135,000 |
| 50 users | $30,000 | $150,000-$200,000 | +$120,000-$170,000 |
| 100 users | $60,000 | $200,000-$350,000 | +$140,000-$290,000 |
These estimates assume annual billing and exclude mandatory professional services fees of $50,000-$200,000 for implementation.
Additional constraints
Summary of challenges
- ThoughtSpot supports SCIM but only at Enterprise tier (Custom pricing (unlimited rows))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
ThoughtSpot doesn't sell SCIM à la carte. It's bundled with Enterprise plan features:
The bigger issue: SCIM tokens expire every 6 months, requiring manual rotation. You also can't use SCIM alongside SAML group mapping, limiting your identity architecture options.
Stitchflow Insight
The Enterprise plan is designed for large-scale deployments with complex data governance needs. If you're a smaller team that just wants automated user provisioning, you're paying $100,000-$500,000/year for enterprise features you likely won't use. We estimate ~80% of Enterprise features are overkill for teams that simply need SCIM automation.
What IT admins are saying
Community sentiment on ThoughtSpot's SCIM implementation is mixed, with concerns focused on operational overhead and architectural limitations. Common complaints:
- SCIM tokens expiring every 6 months requires manual rotation
- Cannot use SCIM provisioning alongside SAML group mapping (mutual exclusion)
- Unidirectional sync limits flexibility for complex org structures
- Enterprise-only requirement locks out smaller analytics teams
The token expiration every 6 months is annoying - you have to remember to rotate it or provisioning just stops working silently.
We wanted to use both SCIM for user provisioning and SAML groups for role mapping, but ThoughtSpot says they conflict with each other. Had to pick one approach.
The recurring theme
While ThoughtSpot offers solid SCIM functionality, the operational maintenance overhead and architectural constraints create friction for teams trying to implement comprehensive identity automation.
The decision
| Your Situation | Recommendation |
|---|---|
| On Pro plan, need SCIM | Use Stitchflow: avoid the Enterprise upgrade and 6-figure annual cost |
| Already on Enterprise | Use native SCIM: you're paying $100K-500K+, SCIM is included |
| Need unlimited data rows beyond Pro's 500M limit | Evaluate Enterprise: SCIM comes bundled with the tier |
| Token management concerns | Use Stitchflow: we handle 6-month token rotations automatically |
| Using SAML group mapping currently | Use Stitchflow: avoid the SCIM/SAML group mapping conflict |
The bottom line
ThoughtSpot gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Make ThoughtSpot workflows AI-native
ThoughtSpot gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- Don't enable SAML group mapping with SCIM (conflicts)
- SCIM tokens expire after 6 months
- SCIM provisioning is unidirectional (IdP to ThoughtSpot)
Unlock SCIM for
ThoughtSpot
ThoughtSpot gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works
