Summary and recommendation
Webflow supports SCIM provisioning, but only on the Enterprise Workspace plan with custom pricing and mandatory annual billing. The SCIM implementation requires SSO to be enabled first and is powered by WorkOS. While it handles standard user lifecycle operations (create, update, deactivate), getting access means navigating enterprise sales processes and committing to annual contracts—often a significant barrier for design and marketing teams that need flexible provisioning.
For creative teams using Webflow with contractors and agencies, this creates a real provisioning gap. Design workflows frequently involve external collaborators who need temporary access to specific projects, but manual user management becomes a security and compliance risk as teams scale. SSO helps with authentication, but without automated provisioning, IT still faces manual onboarding/offboarding for every freelancer and agency partner.
The strategic alternative
Webflow gates SCIM behind Enterprise Workspace. Skip the Enterprise Workspace plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0, OIDC |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Webflow accounts manually. Here's what that costs:
The Webflow pricing problem
Webflow gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Starter | $0 (Starter workspace) | ||
| Core/Growth | $19-49/month (workspace plans) | ||
| Business | $39/month (Business site plan) | ||
| Enterprise | Custom (annual billing required) |
Note: Webflow has two separate pricing categories - Site plans for hosting/publishing and Workspace plans for team collaboration. Enterprise Workspace is required for both SSO and SCIM functionality.
What this means in practice
Without transparent Enterprise pricing, organizations face several challenges:
Many organizations report Enterprise Workspace costs significantly more than the published workspace plans, with some estimates suggesting 3-5x the Growth plan pricing for full Enterprise access.
Additional constraints
Summary of challenges
- Webflow supports SCIM but only at Enterprise tier (Custom (annual billing required))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Webflow doesn't sell SCIM separately. It's bundled with Enterprise Workspace features and requires annual billing:
The requirement for annual billing and custom pricing through sales makes this a significant commitment for teams that simply want to automate their Webflow user management.
Stitchflow Insight
The Enterprise plan is designed for large agencies and enterprises with complex workspace needs. If you're primarily looking for automated user provisioning, you're paying for enterprise-grade features like custom integrations and priority support that most design teams don't need. We estimate ~60% of Enterprise Workspace features are irrelevant for teams that just want SCIM automation.
What IT admins are saying
Community sentiment on Webflow's Enterprise-only SCIM requirement is overwhelmingly negative. Common complaints:
- Being forced into Enterprise pricing just for basic user provisioning
- Having to contact sales for pricing instead of transparent monthly options
- Annual billing requirement that locks teams into expensive commitments
- SSO being held hostage behind the same Enterprise paywall
Enterprise-only SSO/SCIM is such a pain point. We just need basic user management, not a full enterprise suite.
The fact that you have to contact sales for Enterprise pricing is already a red flag. Just tell us what it costs upfront.
The recurring theme
Webflow treats essential security features like SCIM as enterprise upsell opportunities, forcing design teams to pay enterprise prices for basic identity automation.
The decision
| Your Situation | Recommendation |
|---|---|
| On Basic/Core/Growth plans, need SCIM | Use Stitchflow: avoid the Enterprise upgrade and annual commitment |
| Already on Enterprise Workspace | Use native SCIM: you're paying for it already |
| Need Enterprise features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with advanced permissions |
| Design agency managing contractor access | Use Stitchflow: flexible pricing without long-term contracts |
| Small team with minimal user changes | Manual may work: but consider security risks for design assets |
The bottom line
Webflow locks SCIM behind Enterprise Workspace with custom pricing and mandatory annual billing, creating a significant barrier for teams on lower tiers. For design and marketing teams that need automated provisioning without the Enterprise commitment, Stitchflow provides managed SCIM automation at predictable flat-rate pricing.
Make Webflow workflows AI-native
Webflow gates SCIM behind Enterprise Workspace. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- Enterprise Workspace plan required
- SSO must be enabled first
- Contact sales for IdP support confirmation
- Annual billing only for Enterprise
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Enterprise required for SCIM
Webflow gates SCIM behind Enterprise Workspace. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Unlock SCIM for
Webflow
Webflow gates SCIM behind Enterprise Workspace plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works


