Stitchflow
Pipedrive logo

Pipedrive SCIM guide

Native SCIM

How to automate Pipedrive user provisioning, and what it actually costs

Native SCIM requires Ultimate (SSO required) plan

Summary and recommendation

Pipedrive does not offer native SCIM provisioning on any documented plan. While the CRM platform provides SAML SSO on its Ultimate tier and has an Okta connector that offers some provisioning capabilities, there's no standardized SCIM API available across identity providers. This creates a fragmented provisioning experience where Okta users get connector-based automation while teams using Microsoft Entra ID, Google Workspace, or other IdPs have no automated provisioning options at all.

The lack of native SCIM support means IT teams face manual user management overhead that scales poorly as sales teams grow. Without standardized provisioning, onboarding new sales reps requires manual account creation in Pipedrive, and offboarding risks leaving orphaned accounts with access to sensitive sales data and customer information. For organizations using non-Okta identity providers, this creates a significant compliance gap where user access isn't centrally managed through your IdP.

The strategic alternative

Stitchflow provides SCIM-level provisioning through resilient browser automation for Pipedrive without requiring native SCIM support. Works with any Pipedrive plan and any IdP—Okta, Entra ID, Google Workspace, or OneLogin. Flat pricing under $5K/year with SOC 2 Type II compliance.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?No
SSO available?Yes
SSO protocolSAML 2.0
DocumentationNot available

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDSSO only
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Pipedrive accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Pipedrive pricing problem

Pipedrive gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Lite$14/seat/month
Growth$39/seat/month
Premium$49/seat/month
UltimateCustom pricing

Pricing structure

PlanPriceSSOSCIM
Lite$14/seat/month
Growth$39/seat/month
Premium$49/seat/month
UltimateCustom pricing

Note: Okta users can access some provisioning features through Okta's Pipedrive connector, but this isn't native SCIM and has platform-specific limitations.

What this means in practice

For Okta customers

Limited to Okta's connector capabilities (Schema Discovery and Attribute Writeback)
No guarantee of feature parity with other IdPs
Dependent on Okta maintaining the integration

For Entra ID customers

SSO only
no documented provisioning support
Email addresses must match exactly between Entra and Pipedrive (case-sensitive)
Manual user management required

For Google Workspace customers

SSO available but provisioning capabilities unclear
Likely requires manual account creation and management

Additional constraints

Email matching requirements
Entra ID integration requires exact email address matches, including capitalization
IdP dependency
Provisioning features vary significantly between identity providers
Documentation gaps
Native SCIM capabilities not clearly documented, requiring vendor contact for clarification
Ultimate plan requirement
Even basic SSO requires the highest-tier Ultimate plan with custom pricing
Third-party reliability
Provisioning depends on IdP-maintained connectors rather than Pipedrive's own infrastructure

Summary of challenges

  • Pipedrive supports SCIM but only at Enterprise tier (custom pricing)
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What Pipedrive actually offers for identity

Pipedrive doesn't offer native SCIM provisioning on any documented plan. Instead, you get a fragmented identity experience that varies by IdP:

SAML SSO (Ultimate plan required)

SAML 2.0 single sign-on
Support for Okta, Microsoft Entra ID, Google Workspace
Manual XML metadata configuration
Conditional Access session controls
Custom pricing requirement (Ultimate tier)

Okta-specific provisioning (connector-based)

User creation, updates, and deactivation
Schema Discovery and Attribute Writeback
Requires Ultimate plan for SSO prerequisite
No group management capabilities

Manual user management (all other IdPs)

Admin panel-based account creation
Email invitation workflows
Manual permission assignment
Case-sensitive email address matching requirements

The core problem: Pipedrive gatekeeps basic SSO behind expensive custom pricing while offering no standardized SCIM API. Okta users get limited connector-based provisioning, but teams using Entra ID, Google Workspace, or other IdPs are stuck with manual account management. This creates compliance gaps where user access isn't centrally managed and offboarding risks leaving orphaned accounts with access to sensitive sales data.

For organizations that need reliable provisioning automation across any identity provider, Pipedrive's current offerings fall significantly short of enterprise requirements.

What IT admins are saying

Community sentiment on Pipedrive's provisioning reveals frustration with unclear automation options and high SSO barriers:

  • Native SCIM support is completely undocumented - IT teams can't determine what provisioning capabilities actually exist
  • SSO requires the Ultimate plan with custom pricing, making it inaccessible for smaller teams on standard tiers
  • Okta users get some provisioning through a connector, but other IdP users are left guessing about automation options
  • Email address matching requirements are strict, including exact capitalization, creating login failures

Email addresses must match exactly (including capitalization)

Pipedrive support documentation

Single Sign-On is available on the Ultimate tier

Pipedrive pricing page

The recurring theme

Pipedrive keeps IT teams in the dark about provisioning capabilities while gatekeeping basic SSO behind expensive custom pricing, forcing manual user management for most customers.

The decision

Your SituationRecommendation
Small sales team (<20 users) on Growth/Premium plansManual management is acceptable for now
Ultimate plan with Okta integrationTry Okta connector first, but expect IdP lock-in
Growing sales organization (30+ users)Use Stitchflow: automation essential for scaling
Enterprise with compliance requirementsUse Stitchflow: audit trail and governance critical
Multi-IdP environment or non-Okta setupUse Stitchflow: native SCIM unclear, broad IdP support needed

The bottom line

Pipedrive's provisioning story is murky—native SCIM isn't documented, SSO requires the Ultimate plan, and only Okta has a connector that might work. For sales teams that need reliable user lifecycle automation across any IdP, Stitchflow eliminates the guesswork and vendor dependency.

Automate Pipedrive without the tier upgrade

Stitchflow delivers SCIM-level provisioning through resilient browser automation, backed by 24/7 human in the loop for Pipedrive at <$5K/year, flat, regardless of team size.

Works alongside or instead of native SCIM
Syncs with your existing IdP (Okta, Entra ID, Google Workspace)
Automates onboarding and offboarding
SOC 2 Type II certified
24/7 human-in-the-loop monitoring
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

None

Key limitations

  • SSO requires Ultimate plan
  • Native SCIM not documented
  • Okta connector may provide provisioning
  • Email addresses must match exactly (including capitalization)

Documentation not available.

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Where to enable

Okta Admin Console → Applications → Pipedrive → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Okta integration supports SSO and provisioning capabilities. Includes Schema Discovery and Attribute Writeback. Native SCIM not documented - provisioning via Okta connector.

Native SCIM is available on Enterprise. Use Stitchflow if you need provisioning without the tier upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app

Where to enable

Entra admin center → Enterprise applications → Pipedrive → Single sign-on

SSO only with Microsoft Entra ID. Email addresses must match exactly. Native SCIM provisioning not documented for Entra.

Use Stitchflow for automated provisioning.

Unlock SCIM for
Pipedrive

Pipedrive gates automation behind Ultimate (SSO required) plan. Stitchflow delivers the same SCIM outcomes for a flat fee.

See how it works
Admin Console
Directory
Applications
Pipedrive logo
Pipedrive
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Close logo

Close

No SCIM

Sales CRM

ProvisioningNot Supported
Manual Cost$11,754/yr

Close, the SMB-focused sales CRM, does not support SCIM provisioning on any plan. While Close offers SAML SSO on their Professional and Business plans, this only handles authentication—not user lifecycle management. This means IT teams must manually create, update, and deactivate user accounts in Close, even when using SSO. For a sales tool where user access directly correlates to pipeline visibility and commission data, this manual overhead creates both operational friction and compliance risks. The lack of automated provisioning is particularly problematic for growing sales teams where Close access needs to be granted immediately for new hires and revoked instantly for departures. Without SCIM, there's always a lag between identity changes in your IdP and corresponding updates in Close, creating windows where former employees retain access to sensitive sales data or new reps can't access critical CRM information.

View full guide
8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide