Stitchflow
Freshsales logo

Freshsales SCIM guide

Native SCIM

How to automate Freshsales user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Freshsales does not offer native SCIM provisioning. However, as part of the Freshworks suite, it supports SCIM through the unified Freshworks marketplace integration with Okta, Entra ID, and OneLogin—but only on Enterprise plans starting at $71-99 per user per month. This creates a significant cost barrier for smaller sales teams that need automated provisioning but can't justify the Enterprise tier pricing jump from Pro plans at $47-59 per user monthly.

The Freshworks integration approach also introduces complexity since it manages identity across the entire Freshworks suite, not just Freshsales. IT teams must configure provisioning at the suite level, which can create unwanted dependencies and complicate access management when organizations only use specific Freshworks products. Additionally, the legacy SSO apps have been deprecated, forcing a migration to the new unified approach.

The strategic alternative

Stitchflow provides SCIM-level provisioning through resilient browser automation for Freshsales that works on any plan, including Pro and Growth tiers. No need to upgrade to Enterprise just for provisioning capabilities. Flat pricing under $5K/year, regardless of your Freshsales plan or team size.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OAuth2, OIDC
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Freshsales accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Freshsales pricing problem

Freshsales gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Growth$11-18/user/month
Pro$47-59/user/month
Enterprise$71-99/user/month

Pricing structure

PlanPriceSSOSCIM
Growth$11-18/user/month
Pro$47-59/user/month
Enterprise$71-99/user/month

What this means in practice

For a 50-person sales team currently on Pro ($47/user/month), upgrading to Enterprise for SCIM costs an additional $24-40 per user per month:

Current Pro cost
$28,200-35,400/year (50 users × $47-59/month × 12)
Enterprise upgrade cost
$42,600-59,400/year (50 users × $71-99/month × 12)
Additional cost for SCIM
$14,400-24,000/year

This means you're paying $14K-24K annually just to automate user provisioning for your CRM.

Additional constraints

Freshworks suite dependency
SCIM is delivered through the unified Freshworks integration, not a standalone Freshsales connector
Legacy app deprecation
Freshworks has deprecated older SSO applications, forcing migration to their unified identity system
IdP marketplace requirement
Configuration requires installing the Freshworks app from your identity provider's marketplace, adding another dependency layer
Shared identity configuration
Since Freshsales is part of the broader Freshworks suite, identity settings affect other Freshworks products you may not use

Summary of challenges

  • Freshsales supports SCIM but only at Enterprise tier ($71-99/user/month (billed annually))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Freshsales Enterprise pricing ($71-99/user/month) includes SCIM provisioning, but it's bundled within the broader Freshworks identity system.

Freshworks Enterprise Bundle

The Enterprise tier unlocks automated user provisioning alongside a suite of advanced CRM features:

Identity & Security:

SCIM 2.0 provisioning (create, update, deactivate users)
SAML 2.0, OAuth2, and OIDC single sign-on
Advanced security controls and audit logs
API rate limits increased to enterprise levels

CRM Features:

Advanced workflow automation
Custom modules and fields
Territory management
Advanced reporting and analytics
Freddy AI insights
IP restrictions and advanced permissions

The Freshworks Integration Reality

Freshsales SCIM works through the unified Freshworks marketplace app, not a dedicated Freshsales integration:

SettingDetails
Integration methodFreshworks marketplace app (all products)
Supported IdPsOkta, Azure AD, OneLogin
Legacy appsDeprecated (must migrate to new Freshworks app)
Identity scopeShared across entire Freshworks suite

Key limitation: If you only use Freshsales, you're still paying for and configuring identity management across the entire Freshworks ecosystem. The SCIM configuration affects all Freshworks products, even ones you don't use.

What 80% of teams don't need

Most sales teams upgrading to Enterprise for SCIM won't use the majority of bundled features:

Advanced AI insights and predictive scoring
Custom module development
Complex territory hierarchies
Advanced workflow automation beyond basic sales processes

You're paying $71-99/user/month when you might only need the $47/user Pro plan plus automated provisioning.

What IT admins are saying

Community sentiment on Freshsales provisioning reveals frustration with the Enterprise pricing barrier and Freshworks suite complexity:

  • Enterprise plan requirement blocks smaller teams - SCIM provisioning only available at $71-99/user/month, forcing costly upgrades just for basic automation
  • Freshworks suite identity confusion - Shared identity configuration across all Freshworks products creates complexity for single-app deployments
  • Legacy integration deprecation - Older SSO setups require migration to new Freshworks marketplace app, adding project overhead
  • Manual territory and permission management - Without SCIM, sales territory assignments and deal permissions must be configured manually for each user

User accounts must be manually created and configured in Freshsales before SSO authentication will work properly.

IT admin on Reddit

The Freshworks integration handles multiple products at once, which is overkill when you only need Freshsales provisioning.

Identity management consultant

The recurring theme

Freshsales forces IT teams into expensive Enterprise plans just to automate user provisioning, while the unified Freshworks identity model adds unnecessary complexity for organizations using only the CRM product.

The decision

Your SituationRecommendation
Small sales team (<20 users) on Growth planManual management is acceptable
Mid-size sales org on Pro planConsider upgrading to Enterprise for SCIM, or use Stitchflow
Enterprise plan with Freshworks suiteNative SCIM via Freshworks integration works well
Multi-product Freshworks deploymentNative SCIM recommended for unified identity management
Standalone Freshsales needing automationUse Stitchflow: avoid expensive Enterprise upgrade

The bottom line

Freshsales SCIM requires the expensive Enterprise plan ($71-99/user/month) and works through the broader Freshworks identity integration. For organizations not ready for that pricing jump or using Freshsales standalone, Stitchflow delivers the same automation at under $5K/year flat rate.

Automate Freshsales without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Freshsales at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • Part of Freshworks suite - shared identity config
  • Legacy SSO apps deprecated
  • Install Freshworks app for new SSO setup

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Freshsales → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Use unified Freshworks Okta integration. Legacy SSO apps deprecated.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Freshsales → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Azure AD Provisioning (SCIM) available via Freshworks Marketplace. Part of unified Freshworks identity.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Unlock SCIM for
Freshsales

Freshsales gates automation behind Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee, saving you 450%.

See how it works
Admin Console
Directory
Applications
Freshsales logo
Freshsales
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Oracle CX Sales logo

Oracle CX Sales

SCIM Tax

CRM / Sales

SCIM StatusIncluded
Manual Cost$11,754/yr

Oracle CX Sales includes native SCIM 2.0 provisioning through Oracle Identity Cloud Service, available across all Fusion CX Sales subscriptions starting at $65/user/month. However, the implementation comes with significant architectural complexity: SCIM authentication uses Basic Auth only (no OAuth), and provisioning flows through Oracle's broader Fusion Applications ecosystem rather than directly to CX Sales. This creates a web of dependencies where your SCIM integration is tied to Oracle's identity infrastructure, making troubleshooting and configuration changes more complex for IT teams managing hybrid identity environments. The Oracle ecosystem approach means you're not just implementing SCIM for CX Sales—you're federated through Oracle Identity Cloud Service, which adds another layer between your IdP and the application your sales teams actually use. While this works for Oracle-centric organizations, it creates unnecessary complexity for teams using best-of-breed SaaS tools where direct, simple integrations are preferred.

View full guide
Copper logo

Copper

SCIM Tax

CRM / Sales

SCIM StatusIncluded
Manual Cost$11,754/yr

Copper CRM offers SCIM provisioning, but only through Okta's integration and only on the Business plan at $99-134/user/month. This creates a problematic vendor lock-in where your provisioning capabilities are tied to both Okta and Copper's most expensive tier. Teams on lower plans ($9-69/user/month) have no automated user management options, forcing manual provisioning for sales teams where pipeline access and contact ownership require careful control. The Business plan requirement is particularly challenging because it represents a 68-340% price increase over lower tiers just to unlock basic identity management. For a 25-person sales team, upgrading from Professional ($59/user) to Business costs an additional $12,000-19,500 annually. Without automated provisioning, departing sales reps may retain access to sensitive customer data, and new hires face delays accessing the leads and accounts they need to be productive.

View full guide
SAP Sales Cloud logo

SAP Sales Cloud

SCIM Tax

CRM / Sales

SCIM Tax+135%
Manual Cost$11,754/yr

SAP Sales Cloud supports SCIM 2.0 through SAP Identity Provisioning Service, but only on Enterprise plans starting at $134/user/month. The bigger problem: SCIM is disabled by default and requires creating a support ticket in the CEC-CRM component to enable the feature flag. Once enabled, manual user creation is completely disabled, forcing you into full automation dependency. Only Employee-type users can be provisioned, limiting flexibility for different user roles. For organizations on Starter ($57/user/month) or Pro plans, upgrading to Enterprise just for SCIM means a 135% price increase. For a 50-person sales team, that's an additional $46,200/year in licensing costs. The support ticket requirement adds operational friction that delays user access and creates dependency on SAP's support response times.

View full guide