Hello,
Is there a way to limit a particular workflow by SCIM?
Currently it is not supported. You can create your own custom REST endpoint with an IdentityIQ Plugin and protect that endpoint with a custom SPRight. This new endpoint would only launch a specific Workflow. See https://community.sailpoint.com/t5/Plugin-Documents/Plugin-Developer-Guide/td-p/79347