Summary and recommendation
Smartsheet supports full SCIM 2.0 provisioning (user creation, updates, and deprovisioning) but only on Enterprise plans with custom pricing. The major limitation: SCIM permanently deletes users when deprovisioned—there's no soft-delete option. This means when someone leaves your organization, their work history, comments, and contributions in Smartsheet are irretrievably lost.
For most organizations, this hard-delete behavior creates unacceptable compliance and business continuity risks. You lose audit trails, project context, and institutional knowledge. Teams on Business plans ($19/user/month) face a significant cost jump to Enterprise tier just to enable automated provisioning, often paying for advanced features they don't need while accepting permanent data loss on user removal.
The strategic alternative
Smartsheet gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0, OIDC |
| Documentation | Official docs |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Smartsheet accounts manually. Here's what that costs:
The Smartsheet pricing problem
Smartsheet gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Plan Structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Pro | $9-12/user/mo | ||
| Business | $19/user/mo | ||
| Enterprise | Custom pricing |
Note: Enterprise pricing is not publicly disclosed but includes 48-53% discounts for 500+ seats and up to 70% discounts for 5-year commitments.
What this means in practice
Without transparent Enterprise pricing, organizations face unpredictable costs to access SCIM. Based on industry patterns and Smartsheet's discount structure:
| Team Size | Estimated Annual Impact |
|---|---|
| 50 users | $6,000-12,000 premium |
| 100 users | $12,000-24,000 premium |
| 200 users | $24,000-48,000 premium |
These estimates assume Enterprise pricing represents a 40-80% premium over Business tier rates, which is typical for SaaS applications with similar gating strategies.
Additional constraints
Summary of challenges
- Smartsheet supports SCIM but only at Enterprise tier (Custom (48-53% discounts for 500+ seats))
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What the upgrade actually includes
Smartsheet doesn't sell SCIM separately. Enterprise plan bundles SCIM with extensive governance features:
The catch: Smartsheet's SCIM hard-deletes users when deprovisioned—no soft delete or recovery option. Once a user is removed from your IdP, their Smartsheet account and associated data are permanently gone.
Stitchflow Insight
If you need enterprise governance anyway, the upgrade makes sense. If you just want basic automated provisioning without the risk of permanent data loss, you're paying enterprise prices for a feature that's more destructive than helpful. We estimate ~80% of Enterprise features are irrelevant for teams that only need safe, reliable user provisioning.
What IT admins are saying
Community sentiment on Smartsheet's SCIM implementation is mixed, with specific concerns about the hard-delete behavior and Enterprise pricing requirements:
- SCIM permanently deletes users on deprovisioning with no recovery option
- Enterprise plan required for any SCIM/SSO functionality creates pricing barriers
- Domain-level SAML requirement adds deployment complexity for some organizations
- Lack of transparency around Enterprise pricing makes budgeting difficult
The hard delete on SCIM deprovisioning is concerning - once a user is deactivated, there's no way to recover their data or restore access.
We're stuck paying Enterprise prices just to get basic identity features that other tools include in their mid-tier plans.
The recurring theme
While Smartsheet offers full SCIM functionality, the hard-delete behavior and Enterprise-only availability create operational risks and budget constraints that force many teams to look elsewhere.
The decision
| Your Situation | Recommendation |
|---|---|
| On Pro/Business, need SCIM | Use Stitchflow: avoid the Enterprise tier jump and unknown pricing |
| Already on Enterprise | Use native SCIM: you're paying for it and it works well |
| Need Enterprise features beyond SCIM | Evaluate Enterprise: SCIM comes bundled with advanced governance |
| Can't accept hard-deleted users | Use Stitchflow: we preserve user data and enable soft recovery |
| Small team, infrequent changes | Manual may work: but monitor for offboarding gaps |
The bottom line
Smartsheet gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Make Smartsheet workflows AI-native
Smartsheet gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- SAML/SSO/SCIM only on Enterprise plan
- SCIM hard-deletes users when deactivated (no soft-delete)
- Plan-level SAML deprecated Feb 2024 - domain-level required
- Group import from Entra ID not supported
- Not available for Smartsheet Gov or Enterprise Plan Manager
- API rate limits accommodate up to 30,000 users
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Full SCIM support with user role management. SCIM endpoint: https://scim.smartsheet.com/v3 (US), https://scim.smartsheet.eu/v3 (EU). Domain validation required.
Smartsheet gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Configuration for Entra ID
Integration type
Microsoft Entra Gallery app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).
Configuration steps
Set Provisioning Mode = Automatic, configure SCIM connection.
Provisioning trigger
Entra provisions based on user/group assignments to the enterprise app.
Sync behavior
Entra provisioning runs on a scheduled cycle (typically every 40 minutes).
Full SCIM support. SCIM endpoint: https://scim.smartsheet.com/v2. Sync every 40 min. Group import not supported. Hard-delete on deprovisioning.
Smartsheet gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.
Unlock SCIM for
Smartsheet
Smartsheet gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.
See how it works


