Compa does not currently offer SCIM-based user provisioning. Stepwork automates Compa provisioning with 98% accuracy — no API required.
Compa access is managed manually and not tied to lifecycle events Complexity Vector: Permissions depend on HR context and sensitive compensation data, which standard SCIM or API automation cannot reliably manage, creating the need for UI-level automation to keep access accurate and auditable.
You’re not wrong—Compa isn’t broken, but it is fundamentally limited here. Without SCIM-based provisioning, Compa can document who should have access but can’t automatically enforce or revoke it, leaving admins stuck with manual updates and brittle workarounds, which is why teams use Stepwork to automate Compa flows with 98% accuracy without needing an API.
Compa supports SAML sign-on. Stepwork authenticates through your existing identity provider — the same way your employees do.
No. Compa does not currently offer SCIM-based user provisioning, leaving IT teams to manage user lifecycle changes manually.
Stepwork automates Compa provisioning through interface automation — the same way a human would, but with 98% accuracy and no API required. Record the flow once, and Stepwork runs it on demand or on a schedule.
Yes. Stepwork authenticates to Compa through your existing identity provider (Okta, Microsoft Entra ID, 1Password, etc.) and completes MFA natively — including OTP, passkeys, and push notifications. No separate credentials or service accounts are needed.
The primary risk is no native scim-based user provisioning.. Additional risks include manual access updates when hr roles change, stale access to sensitive compensation data, poor visibility into who has access and why. Stepwork eliminates these risks by automating the entire provisioning workflow.
See how Stepwork provisions users in Compa with 98% accuracy — in a 15-minute demo.
Book a DemoNo. Stepwork completes MFA exactly like a human user — supporting OTP, passkeys, push notifications, and other methods. It signs in through your existing identity provider via SAML, mirroring your organization's security posture.