Nutshell SCIM guide

Capsule CRM, an SMB-focused customer relationship management platform, does not support SCIM provisioning on any plan. The platform lacks enterprise identity capabilities entirely—there's no native SAML or OIDC support, with Okta integration relying on SWA (Secure Web Authentication) password vaulting instead of true SSO federation. Microsoft 365 users can access OAuth-based single sign-on, but all user provisioning must be handled manually by administrators across all plans from Starter ($18/user/month) to Ultimate ($72/user/month). This creates a significant operational burden for IT teams managing user lifecycles. Without SCIM, administrators must manually create, update, and deactivate user accounts in Capsule CRM whenever team members join, change roles, or leave the organization. The reliance on SWA password vaulting instead of SAML federation also presents security risks, as credentials are stored and managed by the identity provider rather than using cryptographically secure federation protocols. For organizations with compliance requirements or frequent personnel changes, this manual approach becomes both a security liability and a time-consuming administrative task.

Insightly offers full SCIM 2.0 provisioning, but only on its Enterprise plan at $99/user/month. This creates a significant barrier: teams on Plus ($29/user/month) or Professional ($49/user/month) face a 2-3x price increase just to unlock automated provisioning. For a 50-person sales team, upgrading from Professional to Enterprise costs an additional $30,000/year. Even more problematic, Insightly requires SAML SSO to be configured before SCIM can be enabled, and product licenses must still be assigned manually after users are provisioned—defeating much of the automation benefit. This creates a frustrating gap for growing sales teams. You get user accounts created automatically, but then IT has to manually assign CRM licenses to each new hire. Without proper provisioning, departing employees may retain access to sensitive customer data and sales pipeline information, creating compliance risks for organizations in regulated industries.

Less Annoying CRM, designed for small businesses at $15/user/month, provides no native SCIM provisioning or federated SSO capabilities. The platform only supports Okta's SWA (Secure Web Authentication) integration, which relies on password vaulting rather than true single sign-on. This means IT teams must manually create user accounts in Less Annoying CRM first, then configure password storage in Okta for automated login—a process that defeats the core benefits of modern identity management. This approach creates significant operational overhead for growing organizations. Without SCIM provisioning, onboarding new sales team members requires manual account creation, role assignment, and access configuration in Less Annoying CRM, separate from your identity provider workflows. The lack of automated deprovisioning also creates compliance risks when employees leave, as their CRM access must be manually revoked. For organizations moving beyond the true "small business" category, this manual user lifecycle management becomes a bottleneck that scales poorly.