Stitchflow
Smokeball logo

Smokeball SCIM guide

Connector Only

How to automate Smokeball user provisioning, and what it actually costs

Summary and recommendation

Smokeball, the legal practice management platform, does not support SCIM provisioning on any plan tier. While Smokeball offers SAML 2.0 SSO integration through Microsoft Entra (Azure AD), this only handles authentication for existing users—not automated user lifecycle management. All user provisioning, deprovisioning, and profile updates must be handled manually within Smokeball's admin interface, creating significant operational overhead for law firms managing multiple attorneys, paralegals, and support staff.

This limitation creates a compliance risk for legal practices, where timely user deprovisioning is critical when staff leave the firm. Manual processes increase the likelihood of orphaned accounts with access to sensitive client data and case files. For growing legal practices or multi-office firms, the administrative burden of managing user accounts across Smokeball and other legal technology tools becomes unsustainable.

The strategic alternative

Smokeball has no native SCIM. Automate offboarding, user access reviews, and license workflows across every app, including the ones without APIs. We maintain the integration layer underneath. You focus on judgment, not plumbing.

Quick SCIM facts

SCIM available?No
SCIM tier requiredN/A
SSO required first?No
SSO available?Yes
SSO protocolSAML 2.0 (via Microsoft Entra)
DocumentationNot available

Supported identity providers

IdPSSOSCIMNotes
OktaVia third-partyNo Smokeball integration in Okta OIN.
Microsoft Entra IDSSO supported via Microsoft Entra. No SCIM provisioning available.
Google WorkspaceVia third-partyNo native support
OneLoginVia third-partyNo native support

The cost of not automating

Without SCIM (or an alternative like Stitchflow), your IT team manages Smokeball accounts manually. Here's what that costs:

Source: Stitchflow aggregate data across apps with 2+ instances, normalized to 500 employees
Orphaned accounts (ex-employees with access)7
Unused licenses12
IT hours spent on manual management/year101 hours
Unused license cost/year$3,925
IT labor cost/year$6,088
Cost of compliance misses/year$1,741
Total annual financial impact$11,754

The Smokeball pricing problem

Smokeball gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.

Tier comparison

PlanPriceSSOSCIM
Bill$49/user/mo
BoostCustom quote
GrowCustom quote
Prosper+Custom quote

Pricing and provisioning availability

PlanPriceSSOSCIM
Bill$49/user/mo
BoostCustom quote
GrowCustom quote
Prosper+Custom quote

What this means in practice

Manual user lifecycle management: IT teams must manually create, update, and deactivate Smokeball accounts for lawyers, paralegals, and legal staff. There's no way to sync user attributes, group memberships, or automate onboarding/offboarding processes.

Microsoft Entra dependency: SSO is exclusively available through Microsoft Entra (Azure AD). Firms using other identity providers like Okta, Google Workspace, or OneLogin cannot implement single sign-on without additional identity bridging solutions.

No visibility into access: Without SCIM, you can't programmatically audit who has access to what legal cases or client data within Smokeball, creating compliance risks for law firms handling sensitive client information.

Additional constraints

Custom quote requirement
Higher-tier plans with SSO capabilities require contacting sales, with no transparent pricing
Identity provider limitations
Only Microsoft Entra is supported for SSO, excluding other enterprise IdPs
No API automation
Smokeball doesn't provide APIs for user management automation
Legal compliance risk
Manual user management increases the risk of former employees retaining access to confidential client files
Billing inefficiencies
Unable to automatically adjust licenses based on actual user activity or departures

Summary of challenges

  • Smokeball does not provide native SCIM at any price tier
  • Organizations must rely on third-party tools or manual provisioning
  • Our research shows teams manually provisioning this app spend significant hidden costs annually

What Smokeball actually offers for identity

SAML SSO (via Microsoft Entra only)

Smokeball provides limited single sign-on capabilities exclusively through Microsoft Entra (Azure AD):

SettingDetails
ProtocolSAML 2.0
Supported IdPsMicrosoft Entra (Azure AD) only
ConfigurationMust use Microsoft Entra integration
User requirementManual user creation required in Smokeball

Critical limitation: Smokeball's SSO is restricted to Microsoft Entra environments. Organizations using Okta, Google Workspace, or OneLogin cannot implement federated authentication.

No provisioning capabilities

Smokeball offers zero automated user management:

FeatureSupported?
SCIM provisioning❌ No
Create users❌ No
Update users❌ No
Deactivate users❌ No
Group sync❌ No
JIT provisioning❌ No

The reality: Every user account must be manually created, updated, and deactivated in Smokeball. When lawyers join or leave your firm, IT must log into Smokeball separately to manage their access—no automation exists.

Enterprise features require custom quotes

Smokeball's pricing structure limits identity management options:

Bill plan
($49/user/month): Basic features only
Enterprise tiers
(Boost, Grow, Prosper+): Custom pricing required for SSO access
No SCIM tier
User provisioning unavailable at any price point

For legal practices that need streamlined user management across multiple systems, Smokeball's manual-only approach creates ongoing administrative overhead that scales poorly as firms grow.

What IT admins are saying

Smokeball's lack of SCIM provisioning creates ongoing manual work for IT teams managing legal practices:

  • Manual user provisioning required - every new hire must be added to Smokeball separately
  • No automated deprovisioning when employees leave the firm
  • Limited to Microsoft Entra for SSO, excluding other identity providers
  • Enterprise features require custom quotes, making budgeting difficult

SSO setup uses Microsoft Entra (Azure AD)

Smokeball support documentation

The recurring theme

Even with SSO configured through Microsoft Entra, IT teams must manually create, update, and remove user accounts in Smokeball. This creates security risks when departing employees aren't promptly deprovisioned and administrative overhead for every staff change.

The decision

Your SituationRecommendation
Small law firm (<10 users) with stable staffManual user management is acceptable
Mid-sized firm using Microsoft Entra for other appsManual management with SSO for authentication
Large legal practice (25+ users) with regular staff changesUse Stitchflow: automation essential for managing legal staff turnover
Multi-office law firm with complex org structureUse Stitchflow: automation strongly recommended
Enterprise legal department with compliance requirementsUse Stitchflow: automation essential for audit trail and governance

The bottom line

Smokeball is built for legal practice management but stuck in the past when it comes to identity management. With no SCIM support and only basic SSO through Microsoft Entra, every user addition, role change, or departure requires manual intervention. For legal practices that need automated provisioning without the administrative overhead, Stitchflow delivers the modern identity management that Smokeball doesn't.

Make Smokeball workflows AI-native

Smokeball has no native SCIM. We build complete offboarding, user access reviews, and license workflows across every app, including the ones without APIs.

Covers apps without native SCIM, including the ones without APIs
Less than a week, start to finish (~2 hours of your time)
Built with your team; extend to anything else in the company
Book a Demo

Technical specifications

SCIM Version

Not specified

Supported Operations

Not specified

Supported Attributes

No SCIM provisioningSSO via Microsoft Entra (Azure AD)Contact vendor for enterprise features

Plan requirement

Not specified

Prerequisites

Not specified

Key limitations

  • No SCIM provisioning
  • SSO via Microsoft Entra (Azure AD)
  • Contact vendor for enterprise features

Documentation not available.

Configuration for Entra ID

Integration type

Microsoft Entra Gallery app

Where to enable

Entra admin center → Enterprise applications → Smokeball → Single sign-on

SSO supported via Microsoft Entra. No SCIM provisioning available.

Use Stitchflow for automated provisioning.

Unlock SCIM for
Smokeball

Smokeball has no native SCIM. We still automate end-to-end workflows across every app, including the ones without APIs.

See how it works
Admin Console
Directory
Applications
Smokeball logo
Smokeball
via Stitchflow

Last updated: 2026-01-11

* Pricing and features sourced from public documentation.

Keep exploring

Related apps

Rocket Matter logo

Rocket Matter

No SCIM

Legal Practice Management

ProvisioningNot Supported
Manual Cost$11,754/yr

Rocket Matter, the legal practice management platform used by law firms, does not offer SCIM provisioning on any of its plans (Essentials at $49/user/month through Elite at $129/user/month). While Rocket Matter supports SAML 2.0 SSO integration through third-party services, this only handles authentication for existing users—it doesn't automate user provisioning, deprovisioning, or role updates. IT administrators must manually create, update, and remove user accounts in Rocket Matter, even when SSO is configured. This creates a significant operational burden for legal firms managing attorney, paralegal, and staff access. When new hires join the firm or employees change roles between practice areas, IT teams must manually provision access in Rocket Matter separately from their identity provider. Similarly, when attorneys or staff leave the firm—a common occurrence in legal practice—IT must remember to manually deprovision Rocket Matter access to maintain security and compliance. This manual process increases the risk of orphaned accounts and creates compliance gaps that could be problematic during legal audits.

View full guide
CosmoLex logo

CosmoLex

No SCIM

Legal Practice Management

ProvisioningNot Supported
Manual Cost$11,754/yr

CosmoLex, the legal practice management and accounting software, does not offer SCIM provisioning or documented SSO integration on any plan. While the platform provides basic 2FA security through SMS and authenticator apps, there's no publicly available enterprise identity management features. This leaves IT teams at law firms manually managing user accounts across their $89-129/user/month CosmoLex deployment, with no automated way to provision attorneys, paralegals, and support staff or sync access permissions when roles change. For legal practices handling sensitive client data and trust accounting, this manual provisioning creates significant compliance and security gaps. When attorneys join or leave the firm, IT must remember to manually create or deactivate CosmoLex accounts separately from their identity provider. There's no centralized way to enforce access policies or audit user permissions across client matters. Given the strict confidentiality requirements in legal practice, these manual processes introduce unnecessary risk.

View full guide
PracticePanther logo

PracticePanther

No SCIM

Legal Practice Management

ProvisioningNot Supported
Manual Cost$11,754/yr

PracticePanther, the legal practice management platform used by small and medium law firms, does not publicly document any SCIM provisioning or SSO capabilities. Despite offering three pricing tiers ranging from $49 to $89 per user per month, there's no mention of enterprise identity integration in their public documentation or major IdP directories like Okta's integration network or Microsoft's Entra gallery. This creates a significant blind spot for law firms needing to automate user lifecycle management for attorneys, paralegals, and support staff accessing sensitive client data. The lack of documented SSO and SCIM support forces IT administrators at law firms into manual user management processes - a problematic approach given the strict compliance requirements and confidentiality standards in legal practice. Without automated provisioning and deprovisioning, firms risk former employees retaining access to confidential client information, creating potential ethics violations and security breaches that could jeopardize attorney-client privilege.

View full guide