Summary and recommendation
Mural offers native SCIM 2.0 provisioning with comprehensive functionality - automated user creation, updates, deactivation, and group synchronization. However, SCIM is locked behind Mural's Enterprise tier, which requires custom pricing negotiations and typically represents a significant cost increase from the Business plan ($17.99/user/month).
For organizations using Mural's Team+ ($9.99/user/month) or Business plans, this creates a substantial financial barrier to automated provisioning. A 100-person team would need to upgrade from Business to Enterprise, potentially doubling or tripling their annual spend just to access SCIM capabilities. The custom Enterprise pricing model also makes budgeting difficult and procurement cycles lengthy.
The strategic alternative
Mural gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Mural accounts manually. Here's what that costs:
The Mural pricing problem
Mural gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Free | $0 (5 boards) | ||
| Team+ | $9.99/user/mo | ||
| Business | $17.99/user/mo | ||
| Enterprise | Custom pricing |
All SCIM features (user provisioning, deprovisioning, group sync, and schema discovery with Okta) are locked behind the Enterprise paywall.
What this means in practice
Enterprise pricing is custom/quote-based, but industry benchmarks suggest Enterprise plans typically cost 3-5x more than Business tier. Using conservative estimates:
| Team Size | Current Business Cost | Estimated Enterprise Cost | Additional Annual Cost |
|---|---|---|---|
| 50 users | $10,794/year | ~$32,000-54,000/year | +$21,000-43,000/year |
| 100 users | $21,588/year | ~$65,000-108,000/year | +$43,000-86,000/year |
| 200 users | $43,176/year | ~$130,000-216,000/year | +$87,000-173,000/year |
Additional constraints
Summary of challenges
- Mural supports SCIM but only at Enterprise tier (custom pricing)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Mural doesn't sell SCIM separately. It's exclusively bundled with Enterprise features:
Stitchflow Insight
The Enterprise tier includes extensive governance and compliance tooling designed for large organizations. If you need these enterprise controls anyway, the upgrade makes sense. If you just want automated user provisioning for your design and collaboration teams, you're paying for a comprehensive enterprise bundle you won't fully utilize. We estimate ~60% of Enterprise features are irrelevant for teams that only need SCIM provisioning.
What IT admins are saying
Community sentiment on Mural's SCIM implementation is generally positive among Enterprise customers, though the pricing barrier creates frustration for smaller teams. Common complaints:
- Enterprise tier requirement locks out mid-market teams needing SCIM
- Custom pricing makes it difficult to budget for collaboration tools
- Azure AD setup requires SAML configuration before SCIM can be enabled
- No transparent pricing creates sales friction for IT procurement
We love Mural for workshops but the Enterprise jump is steep when you just need basic user provisioning for a design team of 15 people.
The Azure setup is more complex than other SCIM apps - you have to get SAML working first before you can even configure provisioning.
The recurring theme
Mural's SCIM works well technically, but the Enterprise paywall and setup complexity create barriers for teams that just need automated user management.
The decision
| Your Situation | Recommendation |
|---|---|
| On Team+ or Business, need SCIM | Use Stitchflow: avoid the Enterprise upgrade and custom pricing |
| Already on Enterprise with SCIM | Use native SCIM: you're paying for it and it's well-built |
| Need Enterprise features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with advanced security |
| Using Azure AD | Consider Stitchflow: skip the SAML prerequisite setup complexity |
| Small team with low turnover | Manual may work: but watch for collaboration access gaps |
The bottom line
Mural gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the Mural workflow gap
Mural gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- Enterprise plan required
- SAML setup required before SCIM (Azure)
- Schema discovery with Okta
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
MURAL provisioning in OIN (partner-built, GA). Automate user/group provisioning. Schema discovery, group linking supported.
Mural gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Full Microsoft tutorial. Auto-provision users and groups. SAML setup required for Azure before SCIM. Enterprise plan required.
Mural gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the workflow gap in
Mural
Mural gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack.
Start with the free gap diagnostic
