Stitchflow
Freshservice logo

Freshservice SCIM guide

Native SCIM

How to automate Freshservice user provisioning, and what it actually costs

Native SCIM requires Pro or Enterprise plan

Summary and recommendation

Freshservice supports SCIM provisioning, but only starting from the Pro plan ($99/agent/month annually) and requires installing a separate marketplace app to configure. Even with SCIM enabled, the setup involves managing Organization Admin API keys and navigating documentation spread across multiple sources. For IT service management teams running lean budgets, this creates a significant barrier—especially when you're managing provisioning for dozens of other apps but can't get your own house in order without a major plan upgrade.

The irony is stark: IT teams responsible for provisioning governance across the organization often lack automated provisioning for their own primary tool. This forces manual user management for help desk agents, creating delays when new IT staff need immediate access to respond to tickets. SSO with just-in-time provisioning helps, but doesn't solve deprovisioning or role management as team members change responsibilities.

The strategic alternative

Stitchflow provides managed SCIM automation for Freshservice without requiring the Pro plan upgrade or marketplace app complexity. Works with any Freshservice plan and any IdP (Okta, Entra, Google Workspace, OneLogin). Flat pricing under $5K/year with SOC 2 Type II certification and 24/7 human-in-the-loop support.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Freshservice accounts manually. Here's what that costs:

Source: Stitchflow customers using Freshservice, normalized to 500 employees:
Orphaned accounts (ex-employees with access)64
Unused licenses64
IT hours spent on manual management/year233 hours
Unused license cost/year$91,302
IT labor cost/year$14,009
Cost of compliance misses/year$15,345
Total annual financial impact$120,655

The Freshservice pricing problem

Freshservice gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure (Per Agent, Billed Annually)

PlanPriceSSOSCIM
Starter$19/agent/mo
Growth$49/agent/mo
Pro$99/agent/mo
EnterpriseCustom pricing

What this means in practice

Using current list prices (Growth → Pro for SCIM access):

Team SizeAnnual Upgrade CostMonthly Increase
10 agents+$6,000/year+$500/month
25 agents+$15,000/year+$1,250/month
50 agents+$30,000/year+$2,500/month

Calculation: ($99 - $49) × agents × 12 months

Additional constraints

Marketplace dependency
SCIM requires installing a separate provisioning app from the Freshservice marketplace, adding complexity to setup.
API key management
Configuration demands an Organization Admin API key, creating security and access management overhead.
Documentation fragmentation
SCIM setup instructions are scattered across IdP-specific guides rather than centralized documentation.
IT irony
IT teams managing provisioning for other applications often lack proper automation for their own core service management platform.

Summary of challenges

  • Freshservice supports SCIM but only at Enterprise tier (Custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Freshservice doesn't sell SCIM à la carte. It's bundled with Pro or Enterprise features:

SCIM automated provisioning via marketplace apps
SAML single sign-on (SSO)
Advanced workflow automation
Custom reporting and analytics
API access for integrations
Multi-product suite access
Dedicated customer success (Enterprise)
Advanced security controls

The Pro plan at $99/agent/month gets you SCIM, but requires installing separate marketplace apps from Azure, Okta, or OneLogin. You'll also need Organization Admin API keys and navigate documentation across multiple sources just to set up basic user provisioning.

Stitchflow Insight

If you need advanced ITSM features anyway, the upgrade may make sense. If you just want automated user provisioning without the complexity, you're paying premium pricing for a bundle you won't fully use. We estimate ~60% of Pro/Enterprise features are irrelevant for teams that only need reliable SCIM provisioning.

What IT admins are saying

Community sentiment on Freshservice's SCIM implementation is mixed, with frustration focused on the setup complexity and marketplace dependency. Common complaints:

  • Requiring marketplace app installation instead of native SCIM support
  • Managing Organization Admin API keys for SCIM configuration
  • Documentation scattered across multiple vendor sources
  • Additional complexity layer for what should be standard functionality

Having to install a separate marketplace app just to get SCIM working feels like an unnecessary extra step when other ITSM tools have it built-in.

IT Admin Forum

The API key management for SCIM setup adds another security consideration we have to track and rotate.

Reddit r/sysadmin

The recurring theme

While Freshservice offers SCIM functionality, the marketplace app requirement and API key dependencies create unnecessary friction for IT teams who expect streamlined identity automation - especially ironic for a tool that's supposed to help IT manage other services.

The decision

Your SituationRecommendation
On Starter/Growth, need SCIMUse Stitchflow: avoid the $80K+/year tier jump to Pro
On Pro but SCIM requires EnterpriseUse Stitchflow: skip the custom Enterprise pricing
Already on Enterprise with SCIM includedUse native SCIM: you're paying for it
IT team managing provisioning for other appsUse Stitchflow: get your house in order without budget battles
Small help desk, stable agent countManual may work: but watch for licensing waste

The bottom line

Freshservice's SCIM availability from Pro plan sounds reasonable until you see Pro costs $99+/agent/month—making a 50-agent deployment run $64K+/year just for basic provisioning. Stitchflow delivers the same automation for under $5K annually, regardless of your current Freshservice plan.

Automate Freshservice without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Freshservice at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SCIM setup requires marketplace app installation
  • Organization Admin API key needed for configuration
  • Must install provisioning app from Freshservice marketplace

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Freshservice → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Multiple Okta integrations: Native FreshService, Freshservice Provisioning Connector by Aquera, Effy: Freshservice Provisioning. Supports Group Linking, Schema Discovery, Attribute Writeback. Custom field mapping via 'custom_fields.' prefix.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Freshservice → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Azure AD Provisioning (SCIM) via Freshworks Marketplace app. Tenant URL: https://scim.freshservice.com/scim/v2. Requires Organization Admin API key. Supports Location, Department, Secondary Email sync.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Unlock SCIM for
Freshservice

Freshservice gates automation behind Pro or Enterprise plan. Stitchflow delivers the same SCIM outcomes for a flat fee, saving you 421%.

See how it works
Admin Console
Directory
Applications
Freshservice logo
Freshservice
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Salesforce logo

Salesforce

SCIM Tax
SCIM Tax+600%
Manual Cost$25,970/yr

Salesforce supports SCIM 2.0 provisioning, but only on Enterprise ($175/user/month) and Unlimited ($350/user/month) editions. For organizations on Starter plans ($25/user/month), unlocking automated provisioning requires a 7x price increase—adding $150/user/month just to eliminate manual account management. For a 50-person team, that's $90,000/year in additional licensing costs solely to access SCIM capabilities. The pricing barrier creates a significant operational gap. Without automated provisioning, IT teams must manually create Salesforce accounts, assign profiles and permission sets, and remember to deactivate users when they leave—a process that's error-prone and doesn't scale. SSO alone doesn't solve this problem since it only handles authentication, not account lifecycle management. This manual overhead becomes particularly problematic in organizations with frequent role changes or seasonal hiring patterns.

View full guide
Miro logo

Miro

SCIM Tax
SCIM StatusIncluded
Manual Cost$19,839/yr

Miro supports SCIM (the protocol that lets your identity provider automatically create, update, and remove user accounts). But SCIM is locked behind Miro's Enterprise plan, which requires custom pricing for 30+ members. Teams on Starter ($8/user/month) or Business ($16/user/month) can't access automated provisioning, even though Business includes SAML SSO. This creates a costly gap for mid-sized teams. A 50-person team on Business pays $9,600/year but can't automate user lifecycle management—they're forced into manual provisioning or an expensive Enterprise upgrade just to eliminate the security risk of orphaned accounts. Additionally, Miro's SCIM implementation can't create or delete teams, limiting automation to basic user operations.

View full guide
Zendesk logo

Zendesk

SCIM Tax

Customer Support

SCIM StatusIncluded
Manual Cost$15,353/yr

Zendesk does not offer native SCIM provisioning on any plan, despite being a major enterprise customer support platform. While Professional ($115/agent/month) and Enterprise ($169/agent/month) plans support automated provisioning through Okta and Azure AD via API connectors, this creates vendor lock-in and leaves organizations using Google Workspace or OneLogin with no automated provisioning options. For support teams that experience high turnover and need rapid scaling during peak seasons, this forces IT into manual account management that creates onboarding delays and offboarding security gaps. The lack of universal SCIM support becomes particularly problematic during critical periods when customer service quality depends on rapid agent onboarding. Without standardized provisioning, IT teams can't implement consistent user lifecycle management across all applications, creating compliance risks and operational bottlenecks. When support agents leave or need role changes, the manual process increases the window of inappropriate access—a security concern for platforms handling customer data.

View full guide