Summary and recommendation
Freshservice supports SCIM provisioning, but only starting from the Pro plan ($99/agent/month annually) and requires installing a separate marketplace app to configure. Even with SCIM enabled, the setup involves managing Organization Admin API keys and navigating documentation spread across multiple sources. For IT service management teams running lean budgets, this creates a significant barrier—especially when you're managing provisioning for dozens of other apps but can't get your own house in order without a major plan upgrade.
The irony is stark: IT teams responsible for provisioning governance across the organization often lack automated provisioning for their own primary tool. This forces manual user management for help desk agents, creating delays when new IT staff need immediate access to respond to tickets. SSO with just-in-time provisioning helps, but doesn't solve deprovisioning or role management as team members change responsibilities.
The strategic alternative
Stitchflow provides managed SCIM automation for Freshservice without requiring the Pro plan upgrade or marketplace app complexity. Works with any Freshservice plan and any IdP (Okta, Entra, Google Workspace, OneLogin). Flat pricing under $5K/year with SOC 2 Type II certification and 24/7 human-in-the-loop support.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Freshservice accounts manually. Here's what that costs:
The Freshservice pricing problem
Freshservice gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure (Per Agent, Billed Annually)
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Starter | $19/agent/mo | ||
| Growth | $49/agent/mo | ||
| Pro | $99/agent/mo | ||
| Enterprise | Custom pricing |
What this means in practice
Using current list prices (Growth → Pro for SCIM access):
| Team Size | Annual Upgrade Cost | Monthly Increase |
|---|---|---|
| 10 agents | +$6,000/year | +$500/month |
| 25 agents | +$15,000/year | +$1,250/month |
| 50 agents | +$30,000/year | +$2,500/month |
Calculation: ($99 - $49) × agents × 12 months
Additional constraints
Summary of challenges
- Freshservice supports SCIM but only at Enterprise tier (Custom pricing)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Freshservice doesn't sell SCIM à la carte. It's bundled with Pro or Enterprise features:
The Pro plan at $99/agent/month gets you SCIM, but requires installing separate marketplace apps from Azure, Okta, or OneLogin. You'll also need Organization Admin API keys and navigate documentation across multiple sources just to set up basic user provisioning.
Stitchflow Insight
If you need advanced ITSM features anyway, the upgrade may make sense. If you just want automated user provisioning without the complexity, you're paying premium pricing for a bundle you won't fully use. We estimate ~60% of Pro/Enterprise features are irrelevant for teams that only need reliable SCIM provisioning.
What IT admins are saying
Community sentiment on Freshservice's SCIM implementation is mixed, with frustration focused on the setup complexity and marketplace dependency. Common complaints:
- Requiring marketplace app installation instead of native SCIM support
- Managing Organization Admin API keys for SCIM configuration
- Documentation scattered across multiple vendor sources
- Additional complexity layer for what should be standard functionality
Having to install a separate marketplace app just to get SCIM working feels like an unnecessary extra step when other ITSM tools have it built-in.
The API key management for SCIM setup adds another security consideration we have to track and rotate.
The recurring theme
While Freshservice offers SCIM functionality, the marketplace app requirement and API key dependencies create unnecessary friction for IT teams who expect streamlined identity automation - especially ironic for a tool that's supposed to help IT manage other services.
The decision
| Your Situation | Recommendation |
|---|---|
| On Starter/Growth, need SCIM | Use Stitchflow: avoid the $80K+/year tier jump to Pro |
| On Pro but SCIM requires Enterprise | Use Stitchflow: skip the custom Enterprise pricing |
| Already on Enterprise with SCIM included | Use native SCIM: you're paying for it |
| IT team managing provisioning for other apps | Use Stitchflow: get your house in order without budget battles |
| Small help desk, stable agent count | Manual may work: but watch for licensing waste |
The bottom line
Freshservice's SCIM availability from Pro plan sounds reasonable until you see Pro costs $99+/agent/month—making a 50-agent deployment run $64K+/year just for basic provisioning. Stitchflow delivers the same automation for under $5K annually, regardless of your current Freshservice plan.
Automate Freshservice without the tier upgrade
Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Freshservice at <$5K/year, flat, regardless of team size.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- SCIM setup requires marketplace app installation
- Organization Admin API key needed for configuration
- Must install provisioning app from Freshservice marketplace
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Multiple Okta integrations: Native FreshService, Freshservice Provisioning Connector by Aquera, Effy: Freshservice Provisioning. Supports Group Linking, Schema Discovery, Attribute Writeback. Custom field mapping via 'custom_fields.' prefix.
Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Azure AD Provisioning (SCIM) via Freshworks Marketplace app. Tenant URL: https://scim.freshservice.com/scim/v2. Requires Organization Admin API key. Supports Location, Department, Secondary Email sync.
Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.
Unlock SCIM for
Freshservice
Freshservice gates automation behind Pro or Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee, saving you 421%.
See how it works


