Summary and recommendation
Userpilot supports SCIM 2.0 provisioning, but only on their Enterprise tier with custom pricing. Teams on Starter ($249/month) or Growth ($449/month) plans cannot access automated provisioning, despite these being substantial investments for customer success tooling. Additionally, SSO must be configured as a prerequisite before SCIM can be enabled, adding implementation complexity.
This creates a significant provisioning gap for growing companies. Customer success teams need timely access to onboarding and engagement tools, but manual account management becomes unworkable as headcount scales. Without automated provisioning, IT teams face the choice between expensive Enterprise upgrades (often 3-5x higher than Growth pricing) or accepting the operational burden and security risks of manual user lifecycle management in a tool that handles sensitive customer data and product analytics.
The strategic alternative
Userpilot gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ❌ | SSO only |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Userpilot accounts manually. Here's what that costs:
The Userpilot pricing problem
Userpilot gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Starter | $249/mo | ||
| Growth | $449/mo | ||
| Enterprise | Custom |
Note: SCIM requires SSO to be configured first. No self-service pricing available for Enterprise tier.
What this means in practice
Moving from Growth to Enterprise for SCIM access involves:
Pricing uncertainty: Enterprise pricing is custom-quoted, making budget planning difficult. Based on typical SaaS enterprise premiums, expect 2-3x the Growth plan cost minimum.
SSO dependency: SCIM configuration requires SSO setup first, adding implementation complexity and potential additional costs if SSO wasn't previously needed.
All-or-nothing upgrade: Unlike tiered SCIM features, Userpilot requires full Enterprise upgrade - no partial provisioning capabilities on lower tiers.
Additional constraints
Summary of challenges
- Userpilot supports SCIM but only at Enterprise tier (Custom)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Userpilot doesn't sell SCIM à la carte. It's bundled with Enterprise features:
Stitchflow Insight
The Enterprise tier represents a significant jump from Growth ($449/mo) to custom pricing that typically starts around $2,000/month for mid-market companies. If you need comprehensive customer success platform features anyway, the upgrade may make sense. If you just want automated user provisioning, you're paying for enterprise-grade product analytics and customer journey tools you won't fully use. We estimate ~80% of Enterprise features are irrelevant for teams that only need SCIM.
What IT admins are saying
Community sentiment on Userpilot's SCIM restrictions is largely critical. Common complaints:
- Enterprise-only SCIM forcing expensive plan upgrades for basic provisioning
- SSO requirement creating additional complexity and costs
- Starter ($249/mo) and Growth ($449/mo) users locked out of identity automation
- Custom Enterprise pricing making it difficult to budget for SCIM access
Why does every SaaS company gate SCIM behind their most expensive tier? We just need user provisioning, not all the enterprise bells and whistles.
Having to set up SSO first before you can even configure SCIM is just another barrier. Some vendors make this stuff way harder than it needs to be.
The recurring theme
Basic identity management features are artificially restricted to force expensive enterprise upgrades, leaving mid-market teams without automated provisioning options.
The decision
| Your Situation | Recommendation |
|---|---|
| On Starter ($249/mo), need SCIM | Use Stitchflow: avoid the Enterprise tier jump and custom pricing |
| On Growth ($449/mo), need SCIM | Use Stitchflow: skip the expensive Enterprise upgrade |
| Already on Enterprise with SCIM | Use native SCIM: you're paying for it |
| Need Enterprise features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with other advanced features |
| Small team, infrequent user changes | Manual may work: but watch for access creep as you scale |
The bottom line
Userpilot's Enterprise-only SCIM requirement forces teams on Starter or Growth plans into expensive custom pricing to get basic provisioning automation. For teams that need SCIM without the Enterprise commitment, Stitchflow delivers the same provisioning capabilities at a predictable flat rate.
Make Userpilot workflows AI-native
Userpilot gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- Enterprise tier required for SCIM
- SSO configuration required before SCIM
- Starter and Growth plans do not include SCIM
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Docs
Full SCIM provisioning support
Userpilot gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Unlock SCIM for
Userpilot
Userpilot gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works
