Microsoft 365 SCIM: included, and how to actually govern it
SCIM included. Iden provisions Microsoft 365 on any plan tier.
2 min read · Last updated June 2026
Microsoft 365 includes SCIM provisioning on its Included via Microsoft Entra ID (free tier supports SCIM) plan, so there is no SCIM tax to pay here. The remaining gap is governance: SCIM creates and deactivates accounts, but it does not run access reviews, enforce least privilege, or produce offboarding evidence. Iden adds that layer on top of Microsoft 365's SCIM.
How Iden provisions Microsoft 365 on any plan
Iden does not depend on Microsoft 365’s SCIM endpoint. It connects Microsoft 365 through the method that works on your plan, an API, OAuth, or Iden’s own custom automation, and runs the full lifecycle: onboarding on day one, permission changes as roles move, access requests that replace manual tickets, access reviews with evidence, and offboarding in seconds. Microsoft 365 already gives you SCIM for account create and deactivate; Iden adds the governance layer on top.
Frequently asked questions
Does Microsoft 365 support SCIM provisioning?
Yes. Microsoft 365 includes SCIM provisioning on its Included via Microsoft Entra ID (free tier supports SCIM) plan, so you do not pay a premium for it.
Can I automate Microsoft 365 without SCIM?
Yes. Iden connects Microsoft 365 without SCIM and automates provisioning, deprovisioning, and access reviews on any plan, with an exportable audit trail for SOC 2 and ISO 27001.
How does Iden offboard Microsoft 365 users?
When someone is marked as a leaver in your HRIS, Iden revokes their Microsoft 365 access automatically, in seconds, and records it in a timestamped audit trail.
How current is this Microsoft 365 SCIM pricing?
It comes from the SCIM Tax Index, an open dataset (CC-BY), last verified 2026-06-12. Always check Microsoft 365's current pricing page before you budget.