Summary and recommendation
MyCase, the legal practice management platform, does not offer native SCIM provisioning on any of its plans (Basic at $39/user/month to Advanced at $119/user/month). The only documented provisioning capability comes through OneLogin's connector, which creates a single-vendor dependency that many IT teams want to avoid. While MyCase supports SAML 2.0 and OpenID Connect SSO through various identity providers including Azure AD, OneLogin, and AuthDigital, SSO alone only handles authentication—not the critical user lifecycle management tasks that legal firms need.
For law firms managing attorneys, paralegals, and legal staff across multiple offices, this creates a significant operational gap. Without automated provisioning, IT teams must manually create and deactivate user accounts in MyCase, leading to delays in onboarding new hires and potential security risks when employees leave. Given the sensitive nature of legal data and client information, maintaining proper access controls through automated user lifecycle management isn't just convenient—it's essential for compliance and client confidentiality.
The strategic alternative
MyCase has no native SCIM. Automate offboarding, user access reviews, and license workflows across every app, including the ones without APIs. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | No |
| SCIM tier required | N/A |
| SSO required first? | No |
| SSO available? | Yes |
| SSO protocol | SAML 2.0, OpenID Connect, OAuth |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | Via third-party | ❌ | No Okta OIN listing found. SSO available via AuthDigital or custom SAML configuration. |
| Microsoft Entra ID | Via third-party | ❌ | SSO available via AuthDigital with Azure AD/Microsoft Entra ID support. No native Microsoft Entra gallery app. |
| Google Workspace | Via third-party | ❌ | No native support |
| OneLogin | Via third-party | ❌ | No native support |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages MyCase accounts manually. Here's what that costs:
The MyCase pricing problem
MyCase gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Native SCIM | ❌ Not available | ||
| OneLogin connector | ✓ Available | Requires OneLogin as your IdP | |
| Manual provisioning | ✓ Available |
Provisioning options
| Method | Availability | Limitations |
|---|---|---|
| Native SCIM | ❌ Not available | No direct provisioning support |
| OneLogin connector | ✓ Available | Requires OneLogin as your IdP |
| Manual provisioning | ✓ Available | No automation, prone to errors |
What this means in practice
If you use OneLogin: You can automate user provisioning, deprovisioning, and updates through OneLogin's MyCase connector. This works across all MyCase pricing tiers ($39-$119/user/month).
If you use any other IdP (Okta, Microsoft Entra, Google Workspace): You're stuck with manual user management. IT teams must manually create, update, and remove MyCase accounts, increasing administrative overhead and security risks.
For law firms switching IdPs: Moving away from OneLogin means losing all provisioning automation. You'd need to rebuild user management processes from scratch.
Additional constraints
Summary of challenges
- MyCase does not provide native SCIM at any price tier
- Organizations must rely on third-party tools or manual provisioning
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What MyCase actually offers for identity
OneLogin Provisioning (via connector)
MyCase provides user provisioning exclusively through OneLogin's third-party connector:
| Feature | Supported? |
|---|---|
| Create users | ✓ Yes (OneLogin only) |
| Update users | ✓ Yes (OneLogin only) |
| Deactivate users | ✓ Yes (OneLogin only) |
| Group management | ✓ Yes (OneLogin only) |
| Native SCIM | ❌ No |
| Multi-IdP support | ❌ No |
Critical limitation: This is not native SCIM. MyCase has built no provisioning capabilities into their platform - they rely entirely on OneLogin's connector architecture.
SSO Support (multiple options)
MyCase supports SAML 2.0 and OpenID Connect through several providers:
| Setting | Details |
|---|---|
| Protocol | SAML 2.0, OpenID Connect |
| JIT provisioning | ❌ No |
| SP-initiated | ✓ Yes |
| Okta support | Manual SAML only |
| Google Workspace | Manual SAML only |
Why this approach fails: If your organization uses Okta, Entra ID, or Google Workspace as your primary IdP, you're forced into manual user management or expensive middleware solutions. OneLogin's connector doesn't solve multi-IdP environments or provide the flexibility of native SCIM.
The reality: Legal firms running on non-OneLogin identity providers face manual provisioning across their entire MyCase deployment, regardless of which pricing tier they choose.
What IT admins are saying
MyCase's limited provisioning options create headaches for law firm IT administrators:
- Manual user management required - no native SCIM means every attorney and paralegal must be created by hand
- Vendor lock-in with OneLogin - automated provisioning only works if you're already using OneLogin as your IdP
- SSO gaps for other identity providers - firms using Okta or Microsoft Entra need custom SAML configurations
- Time-consuming onboarding process for new legal staff during busy periods
"User provisioning (create/update/delete) and entitlement management" is only available through OneLogin's connector, leaving other IdP users without automation options according to OneLogin's documentation.
The recurring theme
Law firms face a choice between manual user management overhead or switching to OneLogin just to get basic provisioning automation - neither option scales well for growing practices.
The decision
| Your Situation | Recommendation |
|---|---|
| Small law firm (<10 attorneys) | Manual management is acceptable |
| Single-IdP shop using OneLogin exclusively | Use OneLogin's native connector |
| Mixed IdP environment (Okta/Entra + OneLogin) | Use Stitchflow: unified provisioning across IdPs |
| Multi-office firm with frequent staff changes | Use Stitchflow: automation essential for paralegal/support staff turnover |
| Enterprise legal department with compliance requirements | Use Stitchflow: automation essential for audit trail and SOC 2 compliance |
The bottom line
MyCase only supports automated provisioning through OneLogin's proprietary connector, leaving Okta and Microsoft Entra ID users without native options. For legal organizations that need consistent provisioning automation regardless of their IdP choice, Stitchflow eliminates the OneLogin dependency while providing the compliance controls law firms require.
Make MyCase workflows AI-native
MyCase has no native SCIM. We build complete offboarding, user access reviews, and license workflows across every app, including the ones without APIs.
Technical specifications
SCIM Version
Not specifiedSupported Operations
Not specifiedSupported Attributes
Plan requirement
Not specifiedPrerequisites
Not specifiedKey limitations
- No native SCIM documented
- Provisioning via OneLogin connector
- OAuth for third-party integrations
Documentation not available.
Unlock SCIM for
MyCase
MyCase has no native SCIM. We still automate end-to-end workflows across every app, including the ones without APIs.
See how it works


