PracticePanther SCIM guide

CosmoLex, the legal practice management and accounting software, does not offer SCIM provisioning or documented SSO integration on any plan. While the platform provides basic 2FA security through SMS and authenticator apps, there's no publicly available enterprise identity management features. This leaves IT teams at law firms manually managing user accounts across their $89-129/user/month CosmoLex deployment, with no automated way to provision attorneys, paralegals, and support staff or sync access permissions when roles change. For legal practices handling sensitive client data and trust accounting, this manual provisioning creates significant compliance and security gaps. When attorneys join or leave the firm, IT must remember to manually create or deactivate CosmoLex accounts separately from their identity provider. There's no centralized way to enforce access policies or audit user permissions across client matters. Given the strict confidentiality requirements in legal practice, these manual processes introduce unnecessary risk.

Rocket Matter, the legal practice management platform used by law firms, does not offer SCIM provisioning on any of its plans (Essentials at $49/user/month through Elite at $129/user/month). While Rocket Matter supports SAML 2.0 SSO integration through third-party services, this only handles authentication for existing users—it doesn't automate user provisioning, deprovisioning, or role updates. IT administrators must manually create, update, and remove user accounts in Rocket Matter, even when SSO is configured. This creates a significant operational burden for legal firms managing attorney, paralegal, and staff access. When new hires join the firm or employees change roles between practice areas, IT teams must manually provision access in Rocket Matter separately from their identity provider. Similarly, when attorneys or staff leave the firm—a common occurrence in legal practice—IT must remember to manually deprovision Rocket Matter access to maintain security and compliance. This manual process increases the risk of orphaned accounts and creates compliance gaps that could be problematic during legal audits.

Smokeball, the legal practice management platform, does not support SCIM provisioning on any plan tier. While Smokeball offers SAML 2.0 SSO integration through Microsoft Entra (Azure AD), this only handles authentication for existing users—not automated user lifecycle management. All user provisioning, deprovisioning, and profile updates must be handled manually within Smokeball's admin interface, creating significant operational overhead for law firms managing multiple attorneys, paralegals, and support staff. This limitation creates a compliance risk for legal practices, where timely user deprovisioning is critical when staff leave the firm. Manual processes increase the likelihood of orphaned accounts with access to sensitive client data and case files. For growing legal practices or multi-office firms, the administrative burden of managing user accounts across Smokeball and other legal technology tools becomes unsustainable.