WordPress SCIM guide

Culture Amp, the employee engagement and people analytics platform, explicitly does not support SCIM provisioning on any plan. This is an intentional design decision - Culture Amp separates authentication (handled via SAML SSO) from employee data management (handled via HRIS integrations). While this approach works for their core HR use case, it creates a significant gap for IT teams managing user lifecycle across multiple SaaS applications through their identity provider. The lack of SCIM support means IT admins cannot automate user provisioning, deprovisioning, or attribute updates through standard identity governance workflows. Since Culture Amp contains sensitive employee feedback data and organizational hierarchy information that affects survey visibility, manual user management creates both security risks and operational overhead. Organizations are forced to rely on separate HRIS integrations or manual processes, breaking the unified provisioning model that most enterprises expect from their SaaS stack.

Snyk, the developer security platform, does not offer native SCIM provisioning on any plan. Instead, Enterprise customers can work with Snyk's account team to set up custom attribute mapping for user provisioning—a manual process that requires specific organizational naming conventions and ongoing coordination with Snyk support staff. Even SSO requires upgrading to the Enterprise plan, which starts around $5,000 annually and can exceed $70,000 for larger organizations. This means IT teams managing developer security workflows must either manually provision users or invest significant time working with Snyk's team to configure custom mapping that may break if organizational structures change. For security-conscious engineering teams, this creates a problematic gap. Developer security tools like Snyk are critical for secure coding workflows, yet the lack of automated provisioning means new developers may experience access delays or existing team members may retain access longer than necessary when changing roles. Since Snyk integrates directly into development pipelines, these access management issues can impact both security compliance and developer productivity.

Workable, the applicant tracking system used by hiring teams, does not support SCIM provisioning on any plan. While Workable offers SAML 2.0 SSO integration starting with the Standard plan (plus add-on fees) or Premier plan, this only handles authentication—not user lifecycle management. Users granted access through SSO can join the Workable account automatically via JIT provisioning, but they still require manual job assignment and role configuration within the platform. This creates a significant gap for IT teams managing hiring workflows across multiple departments. Without SCIM, administrators must manually provision recruiters and hiring managers, assign them to appropriate job requisitions, and remember to deprovision access when employees change roles or leave. For an ATS platform that handles sensitive candidate data and hiring decisions, this manual process introduces compliance risks and operational overhead that scales poorly as organizations grow.