Stitchflow
Docusign logo

Docusign SCIM guide

Native SCIM

How to automate Docusign user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

DocuSign supports SCIM provisioning, but only with Enterprise Edition accounts at custom pricing. For teams on Standard ($25-45/user/month) or Business Pro ($40-65/user/month) plans, there's no automated user provisioning available—forcing manual account creation and lifecycle management for every user.

This creates a significant operational burden for IT teams managing DocuSign access. Without SCIM, you're manually onboarding users, updating permissions, and offboarding departing employees. Given DocuSign's critical role in contract workflows, manual processes increase the risk of access remaining active after termination or users getting incorrect permission levels. The activation email requirement adds another friction point, as provisioned users must complete setup themselves rather than having accounts ready immediately.

The strategic alternative

Stitchflow provides SCIM-level provisioning through resilient browser automation for DocuSign without requiring the Enterprise tier upgrade. Works with any DocuSign plan and any identity provider. Flat pricing under $5K/year, regardless of team size.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Docusign accounts manually. Here's what that costs:

Source: Stitchflow customers using Docusign, normalized to 500 employees:
Orphaned accounts (ex-employees with access)24
Unused licenses8
IT hours spent on manual management/year124 hours
Unused license cost/year$0
IT labor cost/year$7,457
Cost of compliance misses/year$5,736
Total annual financial impact$13,193

The Docusign pricing problem

Docusign gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Personal$10-15/user/mo
Standard$25-45/user/mo
Business Pro$40-65/user/mo
EnterpriseCustom pricing

Note: SAML SSO also requires Enterprise tier plus a one-time activation fee on top of the custom pricing.

What this means in practice

The forced Enterprise upgrade creates unpredictable costs since DocuSign doesn't publish Enterprise pricing. Based on typical SaaS pricing patterns, organizations often see:

Pricing opacity
No public Enterprise pricing means lengthy sales cycles and unpredictable budget planning
Bundle bloat
Enterprise includes advanced contract management and compliance features many organizations don't need
One-time fees
SAML activation requires additional fees beyond the base Enterprise cost

For teams currently on Business Pro at $65/user/month, the Enterprise upgrade typically represents a 50-100% increase in per-user costs.

Additional constraints

Dual product complexity
eSignature and CLM (Contract Lifecycle Management) require separate admin consoles with independent SSO/SCIM configurations.
Limited IdP flexibility
CyberArk provisioning only works with DocuSign's 3 default permission profiles, restricting role customization.
User activation friction
Provisioned users receive activation emails and must complete manual setup steps before accessing DocuSign.
Custom sales process
Enterprise pricing requires going through DocuSign's enterprise sales team with minimum commitment requirements.

Summary of challenges

  • Docusign supports SCIM but only at Enterprise tier (Custom)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

DocuSign doesn't sell SCIM separately. It's bundled with Enterprise Edition features:

SCIM automated provisioning
SAML single sign-on (with one-time activation fee)
Advanced user management and permission controls
Enhanced security and compliance features
Custom branding and workflows
Advanced reporting and analytics
Dedicated customer success management
API access and developer tools
Bulk operations and admin controls

Additionally, DocuSign charges a separate one-time activation fee for SAML on top of the already-custom Enterprise pricing, and their SCIM implementation has notable limitations like restricted permission profile support with certain IdPs and mandatory user activation emails.

Stitchflow Insight

The Enterprise tier is designed for large organizations with complex compliance needs. If you just need automated user provisioning, you're paying for enterprise-grade features like custom workflows, advanced analytics, and dedicated support that most teams won't use. We estimate ~80% of Enterprise features are irrelevant for organizations that simply want to automate user lifecycle management.

What IT admins are saying

Community sentiment on DocuSign's SCIM implementation reveals frustration with enterprise-only access and complex configurations. Common complaints:

  • Being locked into expensive enterprise pricing just for automated provisioning
  • One-time activation fees on top of already premium enterprise costs
  • Limited permission profile support with certain IdPs like CyberArk
  • Separate SCIM configurations required for eSignature vs CLM products

The enterprise requirement plus activation fee feels like double-dipping on what should be basic identity management functionality.

IT Admin Forum

Having to configure SCIM separately for eSignature and CLM is a nightmare - it's the same company, same users, but completely different admin consoles.

Reddit r/sysadmin

The recurring theme

DocuSign gates essential identity automation behind enterprise pricing while adding complexity through separate product configurations and additional fees.

The decision

Your SituationRecommendation
Not on Enterprise, need SCIMUse Stitchflow: avoid the expensive tier jump to custom Enterprise pricing
On Business Pro, satisfied with featuresUse Stitchflow: get SCIM without upgrading from $40-65/user/month
Already on EnterpriseUse native SCIM: you're paying for it anyway
Need Enterprise features beyond SCIMEvaluate Enterprise upgrade: SCIM comes bundled with other advanced features
Small team, low employee turnoverManual may work: but watch for user activation friction and security gaps

The bottom line

DocuSign gates SCIM behind Enterprise pricing, forcing a significant cost jump from Business Pro's $40-65/user/month to custom Enterprise rates. For organizations that need automated provisioning without the enterprise feature overhead, Stitchflow delivers SCIM automation at a predictable flat rate under $5K/year.

Automate Docusign without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Docusign at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SAML requires Enterprise Edition + one-time activation fee
  • CyberArk provisioning only works with 3 default permission profiles
  • User activation email sent on provisioning - user must complete activation

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Docusign → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Full SCIM provisioning with group linking and schema discovery. Configure API Account ID in Okta. Can assign permission profiles (Viewer, Sender, Admin). Also available: DocuSign by Aquera connector for advanced LCM.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Docusign → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Automatic user provisioning supported. Requires paid production account with enterprise plan. Note: Group provisioning not supported, only users. Does not work with Developer Sandbox - production only.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Unlock SCIM for
Docusign

Docusign gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee.

See how it works
Admin Console
Directory
Applications
Docusign logo
Docusign
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Monday.com logo

Monday.com

SCIM Tax
SCIM StatusIncluded
Manual Cost$13,597/yr

Monday.com supports SCIM 2.0 provisioning, but only on Enterprise plans—which cost approximately $480 per user annually. For a 100-person team, that's $48,000/year just for the base licensing, before factoring in the premium features you may not need. The pricing jump from Pro (suitable for up to 40 users) to Enterprise represents a significant cost barrier for mid-sized teams that simply want automated user provisioning. This creates a substantial gap for growing organizations. While monday.com offers JIT (just-in-time) provisioning through SAML SSO, this only creates accounts when users first log in—it doesn't handle automated deprovisioning when employees leave or role changes that require access adjustments. For compliance-conscious IT teams, manual user management at scale becomes both a security risk and an operational burden.

View full guide
Gong logo

Gong

SCIM Tax

Revenue Intelligence / Sales

SCIM StatusIncluded
Manual Cost$13,829/yr

Gong supports SCIM (the protocol that lets your identity provider automatically create, update, and remove user accounts), but only on Enterprise plans with custom pricing starting around $1,500/user/year. The pricing structure is particularly complex: annual platform fees ($5K-$50K), per-user licenses ($120-250/month), plus mandatory implementation costs ($15K-$65K). For a 200-user deployment, you're looking at $247K+ annually after typical discounts. Even with SCIM enabled, Gong's default provisioning creates "ghost users" with no seats or capabilities. IT admins must manually configure team assignments and permissions for each provisioned user to actually access Gong's features. This defeats the automation purpose and creates a security gap where users appear provisioned but can't perform their sales functions. For revenue teams handling sensitive customer call data, this provisioning gap is particularly problematic. Sales reps need immediate access to recorded conversations and insights, but Gong's SCIM limitations mean manual intervention for every new hire or role change.

View full guide
Atlassian logo

Atlassian

SCIM Tax
SCIM StatusIncluded
Manual Cost$11,946/yr

Atlassian supports SCIM (the protocol that lets your identity provider automatically create, update, and remove user accounts), but requires a separate Atlassian Guard subscription on top of your existing product licenses. Guard Standard costs $3-4/user/month additional, meaning a 100-person organization pays $3,600-4,800/year extra just for provisioning capabilities. The hidden complexity: Guard billing is per "managed user" across your entire Atlassian organization, not per active product license. Recent changes make this even more operationally burdensome. As of January 2025, SCIM API keys now expire after one year, requiring mandatory annual rotation. Plus, portal-only accounts (common in Jira Service Management for external users) won't support SCIM until Q2 2025, leaving a provisioning gap for customer support workflows.

View full guide