CosmoLex SCIM guide

PracticePanther, the legal practice management platform used by small and medium law firms, does not publicly document any SCIM provisioning or SSO capabilities. Despite offering three pricing tiers ranging from $49 to $89 per user per month, there's no mention of enterprise identity integration in their public documentation or major IdP directories like Okta's integration network or Microsoft's Entra gallery. This creates a significant blind spot for law firms needing to automate user lifecycle management for attorneys, paralegals, and support staff accessing sensitive client data. The lack of documented SSO and SCIM support forces IT administrators at law firms into manual user management processes - a problematic approach given the strict compliance requirements and confidentiality standards in legal practice. Without automated provisioning and deprovisioning, firms risk former employees retaining access to confidential client information, creating potential ethics violations and security breaches that could jeopardize attorney-client privilege.

Rocket Matter, the legal practice management platform used by law firms, does not offer SCIM provisioning on any of its plans (Essentials at $49/user/month through Elite at $129/user/month). While Rocket Matter supports SAML 2.0 SSO integration through third-party services, this only handles authentication for existing users—it doesn't automate user provisioning, deprovisioning, or role updates. IT administrators must manually create, update, and remove user accounts in Rocket Matter, even when SSO is configured. This creates a significant operational burden for legal firms managing attorney, paralegal, and staff access. When new hires join the firm or employees change roles between practice areas, IT teams must manually provision access in Rocket Matter separately from their identity provider. Similarly, when attorneys or staff leave the firm—a common occurrence in legal practice—IT must remember to manually deprovision Rocket Matter access to maintain security and compliance. This manual process increases the risk of orphaned accounts and creates compliance gaps that could be problematic during legal audits.

Smokeball, the legal practice management platform, does not support SCIM provisioning on any plan tier. While Smokeball offers SAML 2.0 SSO integration through Microsoft Entra (Azure AD), this only handles authentication for existing users—not automated user lifecycle management. All user provisioning, deprovisioning, and profile updates must be handled manually within Smokeball's admin interface, creating significant operational overhead for law firms managing multiple attorneys, paralegals, and support staff. This limitation creates a compliance risk for legal practices, where timely user deprovisioning is critical when staff leave the firm. Manual processes increase the likelihood of orphaned accounts with access to sensitive client data and case files. For growing legal practices or multi-office firms, the administrative burden of managing user accounts across Smokeball and other legal technology tools becomes unsustainable.