Stitchflow
Smartsheet logo

Smartsheet SCIM guide

Native SCIM

How to automate Smartsheet user provisioning, and what it actually costs

Native SCIM requires Enterprise plan

Summary and recommendation

Smartsheet supports full SCIM 2.0 provisioning (user creation, updates, and deprovisioning) but only on Enterprise plans with custom pricing. The major limitation: SCIM permanently deletes users when deprovisioned—there's no soft-delete option. This means when someone leaves your organization, their work history, comments, and contributions in Smartsheet are irretrievably lost.

For most organizations, this hard-delete behavior creates unacceptable compliance and business continuity risks. You lose audit trails, project context, and institutional knowledge. Teams on Business plans ($19/user/month) face a significant cost jump to Enterprise tier just to enable automated provisioning, often paying for advanced features they don't need while accepting permanent data loss on user removal.

The strategic alternative

Smartsheet gates SCIM behind Enterprise. Skip the Enterprise plan upgrade and automate complete outcomes across your stack. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?Yes
SCIM tier requiredEnterprise
SSO required first?Yes
SSO available?Yes
SSO protocolSAML 2.0, OIDC
DocumentationOfficial docs

Supported identity providers

IdPSSOSCIMNotes
OktaOIN app with full provisioning
Microsoft Entra IDGallery app with SCIM
Google WorkspaceJIT onlySAML SSO with just-in-time provisioning
OneLoginSupported

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Smartsheet accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Smartsheet pricing problem

Smartsheet gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Plan Structure

PlanPriceSSOSCIM
Pro$9-12/user/mo
Business$19/user/mo
EnterpriseCustom pricing

Note: Enterprise pricing is not publicly disclosed but includes 48-53% discounts for 500+ seats and up to 70% discounts for 5-year commitments.

What this means in practice

Without transparent Enterprise pricing, organizations face unpredictable costs to access SCIM. Based on industry patterns and Smartsheet's discount structure:

Team SizeEstimated Annual Impact
50 users$6,000-12,000 premium
100 users$12,000-24,000 premium
200 users$24,000-48,000 premium

These estimates assume Enterprise pricing represents a 40-80% premium over Business tier rates, which is typical for SaaS applications with similar gating strategies.

Additional constraints

Opaque pricing
Enterprise costs require sales engagement with no published rates.
Hard delete behavior
SCIM deprovisioning permanently deletes users with no recovery option—unusual and risky compared to standard soft-delete approaches.
Domain validation required
New SAML/SSO setups require domain-level configuration (plan-level deprecated February 2024).
No group sync
SCIM supports user operations but cannot sync group memberships from identity providers.
Government exclusion
SCIM unavailable for Smartsheet Gov and Enterprise Plan Manager instances.

Summary of challenges

  • Smartsheet supports SCIM but only at Enterprise tier (Custom (48-53% discounts for 500+ seats))
  • Google Workspace users get JIT provisioning only, not full SCIM
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What the upgrade actually includes

Smartsheet doesn't sell SCIM separately. Enterprise plan bundles SCIM with extensive governance features:

SCIM 2.0 automated provisioning (with permanent user deletion)
SAML 2.0 single sign-on (domain-level validation required)
Advanced user role management and permissions
Enterprise-grade security controls and audit logs
Data governance and compliance features
Premium support and service level agreements
Advanced reporting and analytics
Custom branding and white-labeling options

The catch: Smartsheet's SCIM hard-deletes users when deprovisioned—no soft delete or recovery option. Once a user is removed from your IdP, their Smartsheet account and associated data are permanently gone.

Stitchflow Insight

If you need enterprise governance anyway, the upgrade makes sense. If you just want basic automated provisioning without the risk of permanent data loss, you're paying enterprise prices for a feature that's more destructive than helpful. We estimate ~80% of Enterprise features are irrelevant for teams that only need safe, reliable user provisioning.

What IT admins are saying

Community sentiment on Smartsheet's SCIM implementation is mixed, with specific concerns about the hard-delete behavior and Enterprise pricing requirements:

  • SCIM permanently deletes users on deprovisioning with no recovery option
  • Enterprise plan required for any SCIM/SSO functionality creates pricing barriers
  • Domain-level SAML requirement adds deployment complexity for some organizations
  • Lack of transparency around Enterprise pricing makes budgeting difficult

The hard delete on SCIM deprovisioning is concerning - once a user is deactivated, there's no way to recover their data or restore access.

IT Administrator, Reddit

We're stuck paying Enterprise prices just to get basic identity features that other tools include in their mid-tier plans.

Systems Admin, Spiceworks

The recurring theme

While Smartsheet offers full SCIM functionality, the hard-delete behavior and Enterprise-only availability create operational risks and budget constraints that force many teams to look elsewhere.

The decision

Your SituationRecommendation
On Pro/Business, need SCIMUse Stitchflow: avoid the Enterprise tier jump and unknown pricing
Already on EnterpriseUse native SCIM: you're paying for it and it works well
Need Enterprise features beyond SCIMEvaluate Enterprise: SCIM comes bundled with advanced governance
Can't accept hard-deleted usersUse Stitchflow: we preserve user data and enable soft recovery
Small team, infrequent changesManual may work: but monitor for offboarding gaps

The bottom line

Smartsheet gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Make Smartsheet workflows AI-native

Smartsheet gates SCIM behind Enterprise. We build complete offboarding, user access reviews, and license workflows without that SCIM Tax upgrade.

No Enterprise upgrade required
Less than a week, start to finish (~2 hours of your time)
We maintain the integration layer underneath
Book a Demo

Technical specifications

SCIM Version

2.0

Supported Operations

Create, Update, Deactivate, Groups

Supported Attributes

Not specified

Plan requirement

Enterprise

Prerequisites

SSO must be configured first

Key limitations

  • SAML/SSO/SCIM only on Enterprise plan
  • SCIM hard-deletes users when deactivated (no soft-delete)
  • Plan-level SAML deprecated Feb 2024 - domain-level required
  • Group import from Entra ID not supported
  • Not available for Smartsheet Gov or Enterprise Plan Manager
  • API rate limits accommodate up to 30,000 users

Configuration for Okta

Integration type

Okta Integration Network (OIN) app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Okta Admin Console → Applications → Smartsheet → Provisioning

Required credentials

SCIM endpoint URL and bearer token (generated in app admin console).

Configuration steps

Enable Create Users, Update User Attributes, and Deactivate Users.

Provisioning trigger

Okta provisions based on app assignments (users or groups).

Full SCIM support with user role management. SCIM endpoint: https://scim.smartsheet.com/v3 (US), https://scim.smartsheet.eu/v3 (EU). Domain validation required.

Smartsheet gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app with SCIM provisioning

Prerequisite

SSO must be configured before enabling SCIM.

Where to enable

Entra admin center → Enterprise applications → Smartsheet → Provisioning

Required credentials

Tenant URL (SCIM endpoint) and Secret token (bearer token from app admin console).

Configuration steps

Set Provisioning Mode = Automatic, configure SCIM connection.

Provisioning trigger

Entra provisions based on user/group assignments to the enterprise app.

Sync behavior

Entra provisioning runs on a scheduled cycle (typically every 40 minutes).

Full SCIM support. SCIM endpoint: https://scim.smartsheet.com/v2. Sync every 40 min. Group import not supported. Hard-delete on deprovisioning.

Smartsheet gates SCIM behind Enterprise. Stitchflow automates complete workflows without that SCIM Tax upgrade.

Unlock SCIM for
Smartsheet

Smartsheet gates SCIM behind Enterprise plan. We automate complete offboarding and access reviews across your stack without that SCIM Tax upgrade.

See how it works
Admin Console
Directory
Applications
Smartsheet logo
Smartsheet
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

8x8 logo

8x8

SCIM Tax

UCaaS / Business Communications

SCIM StatusIncluded
Manual Cost$11,754/yr

8x8 supports SCIM 2.0 for automated user provisioning, but only on their quote-based X Series plans (previously $24-44/user/month range before they moved to custom pricing). While SCIM can create, update, and deactivate users, it has critical gaps that create ongoing manual overhead: license assignment must be done manually after every user is provisioned, users can't be deleted (only deactivated), and provisioned users don't automatically appear in the Company Directory. For IT teams managing a unified communications platform that typically covers all employees, these limitations defeat much of SCIM's purpose. You're still manually touching every user account to assign licenses and ensure directory visibility. The lack of user deletion support also creates compliance headaches when employees leave - accounts accumulate as "deactivated" rather than being properly removed.

View full guide
Absorb LMS logo

Absorb LMS

SCIM Tax

Learning Management System (LMS)

SCIM StatusIncluded
Manual Cost$11,754/yr

Absorb LMS supports native SCIM provisioning, but only on Enterprise plans with SSO as a required paid add-on. Even with SCIM enabled, the implementation has critical limitations: SAML provisioning only creates accounts on first login and never updates existing users, and full user provisioning requires the specific "Absorb 5 - New Learner Experience" version. For organizations managing compliance training across hundreds or thousands of learners, these gaps create ongoing manual work. The SSO-as-add-on model means you're paying extra fees on top of already custom Enterprise pricing ($6-12/user/month base, but varies significantly). For learning management systems handling external partners, contractors, and employees across different access levels, the inability to update existing user attributes through SAML provisioning forces IT teams into manual account management—exactly what automated provisioning should eliminate.

View full guide
Airbase logo

Airbase

SCIM Tax

Spend Management / Corporate Cards

SCIM StatusIncluded
Manual Cost$11,754/yr

Airbase supports SCIM provisioning, but only on Enterprise plans starting around $8,500/year. While SCIM works with all major identity providers (Okta, Entra ID, Google Workspace), the Enterprise requirement creates a significant barrier for smaller finance teams who need automated provisioning for spend management but can't justify enterprise-level spend management software costs. This creates a particular challenge in finance applications where rapid provisioning and deprovisioning is critical for corporate card access and financial controls. Manual user management means delayed access for new employees needing corporate cards, and more critically, potential security gaps when departing employees retain access to spend management systems. For finance teams handling sensitive financial data and corporate spending, these delays and oversights create both operational friction and compliance risks.

View full guide