Stitchflow
Webflow logo

Webflow SCIM guide

Native SCIM

How to automate Webflow user provisioning, and what it actually costs

Native SCIM requires Enterprise Workspace plan

Summary and recommendation

Webflow supports SCIM provisioning, but only on the Enterprise Workspace plan with custom pricing and mandatory annual billing. The SCIM implementation requires SSO to be enabled first and is powered by WorkOS. While it handles standard user lifecycle operations (create, update, deactivate), getting access means navigating enterprise sales processes and committing to annual contracts—often a significant barrier for design and marketing teams that need flexible provisioning.

For creative teams using Webflow with contractors and agencies, this creates a real provisioning gap. Design workflows frequently involve external collaborators who need temporary access to specific projects, but manual user management becomes a security and compliance risk as teams scale. SSO helps with authentication, but without automated provisioning, IT still faces manual onboarding/offboarding for every freelancer and agency partner.

The strategic alternative

Webflow gates SCIM behind Enterprise Workspace. Skip the Enterprise Workspace plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OIDC
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Webflow accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Webflow pricing problem

Webflow gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Starter$0 (Starter workspace)
Core/Growth$19-49/month (workspace plans)
Business$39/month (Business site plan)
EnterpriseCustom (annual billing required)

Note: Webflow has two separate pricing categories - Site plans for hosting/publishing and Workspace plans for team collaboration. Enterprise Workspace is required for both SSO and SCIM functionality.

What this means in practice

Without transparent Enterprise pricing, organizations face several challenges:

Sales-gated access
Teams must contact sales for Enterprise pricing, creating procurement delays
Forced annual commitment
No monthly billing option for Enterprise features
All-or-nothing upgrade
SCIM comes bundled with Enterprise features many teams don't need
Design team friction
Contractors and freelancers common in design workflows can't be automatically provisioned

Many organizations report Enterprise Workspace costs significantly more than the published workspace plans, with some estimates suggesting 3-5x the Growth plan pricing for full Enterprise access.

Additional constraints

SSO prerequisite
SCIM cannot be enabled without first configuring SSO authentication.
WorkOS dependency
SCIM provisioning runs through WorkOS, adding a third-party integration layer.
Contact requirement
IdP support must be confirmed through Customer Success, not self-service setup.
Agency complexity
Design agencies managing multiple client workspaces face additional provisioning challenges across workspace boundaries.

Summary of challenges

  • Webflow supports SCIM but only at Enterprise tier (Custom (annual billing required))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Webflow doesn't sell SCIM separately. It's bundled with Enterprise Workspace features and requires annual billing:

SCIM automated provisioning via WorkOS
SAML 2.0 and OIDC single sign-on (SSO)
JIT (Just-in-Time) provisioning when SSO is enabled
Advanced workspace administration
Custom integrations and API access
Priority support with dedicated customer success
Enhanced security controls
Advanced permissions and role management

The requirement for annual billing and custom pricing through sales makes this a significant commitment for teams that simply want to automate their Webflow user management.

Stitchflow Insight

The Enterprise plan is designed for large agencies and enterprises with complex workspace needs. If you're primarily looking for automated user provisioning, you're paying for enterprise-grade features like custom integrations and priority support that most design teams don't need. We estimate ~60% of Enterprise Workspace features are irrelevant for teams that just want SCIM automation.

What IT admins are saying

Community sentiment on Webflow's Enterprise-only SCIM requirement is overwhelmingly negative. Common complaints:

  • Being forced into Enterprise pricing just for basic user provisioning
  • Having to contact sales for pricing instead of transparent monthly options
  • Annual billing requirement that locks teams into expensive commitments
  • SSO being held hostage behind the same Enterprise paywall

Enterprise-only SSO/SCIM is such a pain point. We just need basic user management, not a full enterprise suite.

IT Admin, Reddit

The fact that you have to contact sales for Enterprise pricing is already a red flag. Just tell us what it costs upfront.

Security Manager, Community Forum

The recurring theme

Webflow treats essential security features like SCIM as enterprise upsell opportunities, forcing design teams to pay enterprise prices for basic identity automation.

The decision

Your SituationRecommendation
On Basic/Core/Growth plans, need SCIMUse Stitchflow: avoid the Enterprise upgrade and annual commitment
Already on Enterprise WorkspaceUse native SCIM: you're paying for it already
Need Enterprise features beyond SCIMEvaluate Enterprise: SCIM comes bundled with advanced permissions
Design agency managing contractor accessUse Stitchflow: flexible pricing without long-term contracts
Small team with minimal user changesManual may work: but consider security risks for design assets

The bottom line

Webflow locks SCIM behind Enterprise Workspace with custom pricing and mandatory annual billing, creating a significant barrier for teams on lower tiers. For design and marketing teams that need automated provisioning without the Enterprise commitment, Stitchflow provides managed SCIM automation at predictable flat-rate pricing.

Make Webflow workflows AI-native

Webflow gates SCIM behind Enterprise Workspace. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise Workspace upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Enterprise Workspace plan required
  • SSO must be enabled first
  • Contact sales for IdP support confirmation
  • Annual billing only for Enterprise

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Webflow → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Enterprise required for SCIM

Webflow gates SCIM behind Enterprise Workspace. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Webflow

Webflow gates SCIM behind Enterprise Workspace plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Webflow logo
Webflow
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide