Summary and recommendation
Freshchat offers SCIM provisioning only on Enterprise plans ($95/agent/month), but only through specific marketplace apps for OneLogin and Azure AD - not as native SCIM functionality. This creates a significant limitation for organizations using other identity providers like Okta or Google Workspace, who must rely on workarounds or manual provisioning. Even with supported IdPs, the implementation requires installing separate Freshworks marketplace apps rather than standard SCIM connectors, adding complexity to your identity management stack.
The restricted SCIM support creates operational friction for IT teams managing Freshchat access across support, sales, and customer success teams. Without proper provisioning automation, organizations face the dual burden of manual user lifecycle management and the security risk of orphaned accounts when agents leave or change roles. For growing support teams that need rapid onboarding and consistent access controls, the Enterprise-only requirement represents a substantial cost barrier - potentially adding tens of thousands annually just to access basic provisioning capabilities.
The strategic alternative
Freshchat has no native SCIM. Automate offboarding, user access reviews, and license workflows across every app, including the ones without APIs. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | No |
| SCIM tier required | N/A |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0, OAuth2, OIDC, JWT |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | Via third-party | ❌ | Use unified Freshworks Okta integration. Legacy Freshchat SSO app deprecated. Install Freshworks app for SSO/SCIM config. |
| Microsoft Entra ID | Via third-party | ❌ | Azure AD Provisioning (SCIM) available via Freshworks Marketplace. Part of unified Freshworks identity. |
| Google Workspace | Via third-party | ❌ | No native support |
| OneLogin | Via third-party | ❌ | No native support |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Freshchat accounts manually. Here's what that costs:
The Freshchat pricing problem
Freshchat gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Growth | $19-23/agent/month | ||
| Pro | $49-59/agent/month | ||
| Enterprise | $95/agent/month |
Pricing structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Growth | $19-23/agent/month | ||
| Pro | $49-59/agent/month | ||
| Enterprise | $95/agent/month |
What this means in practice
For a 20-person support team currently on Pro ($59/agent/month), upgrading to Enterprise solely for SCIM costs an additional $43,200/year:
This 61% price increase forces teams to choose between automated user management and budget constraints, especially problematic for growing support operations that need efficient onboarding.
Additional constraints
Summary of challenges
- Freshchat does not provide native SCIM at any price tier
- Organizations must rely on third-party tools or manual provisioning
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Enterprise Plan ($95/agent/month)
Freshchat's Enterprise tier includes identity management as part of the broader Freshworks suite integration:
Identity & Access Features:
Enterprise Business Features:
The Reality Check
What you're paying for: The $95/agent/month Enterprise plan is designed for large support organizations that need the full Freshworks ecosystem. You're paying for advanced customer service automation, not just identity management.
The SCIM limitation: Freshchat doesn't offer native SCIM. Instead, you're dependent on third-party marketplace apps from OneLogin or Azure AD to handle provisioning. This creates an additional integration layer and potential failure point.
Cost impact for identity-focused teams: If you have 50 support agents and only need SCIM provisioning, you're paying $4,750/month ($57K annually) primarily for business features you may not use, with SCIM as a secondary capability through external apps.
What IT admins are saying
Freshchat's SCIM limitations through OneLogin and Azure only create deployment headaches for IT teams:
- Enterprise pricing wall - SCIM requires $95/agent/month Enterprise plan, making automation expensive for smaller support teams
- Limited IdP options - SCIM only works through OneLogin or Azure AD provisioning apps, excluding Okta and Google Workspace admins
- Freshworks app confusion - Legacy Freshservice SSO app deprecated, must use unified Freshworks app for post-2020 configurations
- Manual workarounds - Teams on Pro plans ($49-59/agent) stuck with manual user management despite having SSO
SCIM via OneLogin or Azure provisioning apps
Install Freshworks app for SSO config (post March 2020)
The recurring theme
Freshchat's SCIM approach forces IT teams into specific IdP workflows and expensive Enterprise pricing, leaving many organizations managing support agents manually despite having modern identity infrastructure.
The decision
| Your Situation | Recommendation |
|---|---|
| Small support team (<10 agents) | Manual management is acceptable on Growth plan |
| Mixed Freshworks suite deployment | Native SCIM via OneLogin/Azure if already on Enterprise |
| Pure Freshchat with <25 agents | Use Stitchflow: avoid $95/agent Enterprise upgrade |
| Large customer success organization | Use Stitchflow: automation essential for team management |
| Multi-product stack beyond Freshworks | Use Stitchflow: unified provisioning across all apps |
The bottom line
Freshchat's SCIM requires the $95/agent Enterprise plan and only works through OneLogin or Azure marketplace apps. For organizations that don't need Enterprise features or use other identity providers, Stitchflow delivers full provisioning automation at a fraction of the cost.
Make Freshchat workflows AI-native
Freshchat has no native SCIM. We build complete offboarding, user access reviews, and license workflows across every app, including the ones without APIs.
Technical specifications
SCIM Version
Not specifiedSupported Operations
Not specifiedSupported Attributes
Not specifiedPlan requirement
Not specifiedPrerequisites
Not specifiedKey limitations
- Legacy Freshservice SSO app deprecated
- Install Freshworks app for SSO config (post March 2020)
- SCIM via OneLogin or Azure provisioning apps
Configuration for Okta
Integration type
Okta Integration Network (OIN) app
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Use unified Freshworks Okta integration. Legacy Freshchat SSO app deprecated. Install Freshworks app for SSO/SCIM config.
Use Stitchflow for automated provisioning.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Azure AD Provisioning (SCIM) available via Freshworks Marketplace. Part of unified Freshworks identity.
Use Stitchflow for automated provisioning.
Unlock SCIM for
Freshchat
Freshchat has no native SCIM. We still automate end-to-end workflows across every app, including the ones without APIs.
See how it works


