Summary and recommendation
Zoho Desk does not offer native SCIM provisioning at the application level. While Zoho provides SCIM capabilities through Zoho Directory (their identity management service), this operates at the organizational level and requires either an Enterprise plan ($50/agent/month) or Zoho One subscription. This means you're forced into Zoho's ecosystem to get automated provisioning, and you lose the flexibility to use your existing IdP's user management workflows directly with Zoho Desk.
For support teams dealing with high turnover and seasonal staffing changes, this creates a significant operational burden. IT administrators must manually create and deactivate support agent accounts in Zoho Desk, even when using SSO for authentication. This gap between authentication and provisioning means new support agents can't immediately access tickets and customer data, directly impacting response times and customer satisfaction. The security risk compounds when former agents retain access to sensitive customer support data after leaving the organization.
The strategic alternative
Zoho Desk gates SCIM behind Enterprise. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across the rest of your stack. Stitchflow builds and maintains the IT workflows your team still runs manually, across every app, including the ones without APIs.
Quick SCIM facts
| SCIM available? | Yes |
| SCIM tier required | Enterprise |
| SSO required first? | Yes |
| SSO available? | Yes |
| SSO protocol | SAML 2.0 |
| Documentation | Not available |
Supported identity providers
| IdP | SSO | SCIM | Notes |
|---|---|---|---|
| Okta | ✓ | ✓ | OIN app with full provisioning |
| Microsoft Entra ID | ✓ | ✓ | Gallery app with SCIM |
| Google Workspace | ✓ | JIT only | SAML SSO with just-in-time provisioning |
| OneLogin | ✓ | ✓ | Supported |
The cost of not automating
Without SCIM (or an alternative like Stitchflow), your IT team manages Zoho Desk accounts manually. Here's what that costs:
The Zoho Desk pricing problem
Zoho Desk gates SCIM provisioning behind premium plans, forcing significant cost increases for basic user management.
Tier comparison
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Standard | $20/agent/month | ||
| Professional | $35/agent/month | ||
| Enterprise | $50/agent/month |
Pricing structure
| Plan | Price | SSO | SCIM |
|---|---|---|---|
| Standard | $20/agent/month | ||
| Professional | $35/agent/month | ||
| Enterprise | $50/agent/month |
What this means in practice
Forced Enterprise upgrade: Even basic SSO requires Enterprise tier at $50/agent/month. For a 20-agent support team, that's $12,000/year vs $4,800/year on Standard—a $7,200 premium just for identity management.
Organizational-level provisioning: SCIM works through Zoho Directory, not Zoho Desk directly. This means:
Additional constraints
Summary of challenges
- Zoho Desk supports SCIM but only at Enterprise tier (custom pricing)
- Google Workspace users get JIT provisioning only, not full SCIM
- Our research shows teams manually provisioning this app spend significant hidden costs annually
What Zoho Desk actually offers for identity
SCIM Provisioning (via Zoho Directory)
Zoho Desk doesn't offer direct SCIM integration. Instead, provisioning happens through Zoho Directory at the organizational level:
| Feature | Supported? |
|---|---|
| Create users | ✓ Yes (via Zoho Directory) |
| Update attributes | ✓ Yes (via Zoho Directory) |
| Deactivate users | ✓ Yes (via Zoho Directory) |
| Group provisioning | ✓ Yes (via Zoho Directory) |
Critical dependency: You must use Zoho's ecosystem-wide directory service. This means SCIM provisioning affects your entire Zoho organization, not just Zoho Desk users.
SAML SSO Options
Zoho Desk supports SAML 2.0 integration with multiple identity providers:
| Setting | Details |
|---|---|
| Protocol | SAML 2.0 |
| Supported IdPs | Okta, Azure AD/Entra, ADFS, custom SAML providers |
| Help Center SSO | Available for end users |
| JIT Provisioning | ✓ Supported |
Architecture limitation: SSO and provisioning are tightly coupled to Zoho's broader platform. You can't implement Zoho Desk identity management without adopting Zoho Directory organization-wide.
What's Missing for Standalone Deployments
Bottom line: Zoho Desk's identity features assume you're all-in on the Zoho ecosystem. Teams using Zoho Desk as a standalone help desk solution face architectural constraints that limit provisioning flexibility.
What IT admins are saying
Community sentiment on Zoho Desk's provisioning reveals frustration with the Enterprise-tier requirement and indirect SCIM access:
- Enterprise plan requirement blocks smaller teams - At $50/agent/month, automated provisioning is financially out of reach for many support teams
- SCIM provisioning only through Zoho Directory - Can't provision directly to Zoho Desk; must go through organization-level Zoho Directory
- Limited IdP coverage - No documented support for Google Workspace or OneLogin provisioning
- Manual user management for most customers - Support teams below Enterprise tier must manually add/remove agents despite high turnover rates
SCIM provisioning via Zoho Directory at org level
Duo integration does not support SCIM (SAML only)
The recurring theme
Zoho Desk forces IT teams into either expensive Enterprise plans or manual user management for their support staff. The indirect provisioning through Zoho Directory adds another layer of complexity that many organizations want to avoid.
The decision
| Your Situation | Recommendation |
|---|---|
| Small support team (<10 agents) | Manual management is workable with Zoho's user-friendly interface |
| Already using Zoho One suite | Use native SCIM via Zoho Directory |
| Support team with high turnover | Use Stitchflow: rapid onboarding/offboarding is critical |
| Multi-IdP environment (non-Zoho) | Use Stitchflow: native SCIM requires Zoho Directory |
| Enterprise with compliance requirements | Use Stitchflow: comprehensive audit trail and automated provisioning |
The bottom line
Zoho Desk gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the Zoho Desk workflow gap
Zoho Desk gates SCIM behind Enterprise, but the bigger issue is the workflow around it. Stitchflow builds and maintains the offboarding, access review, or license workflow underneath.
Technical specifications
SCIM Version
2.0
Supported Operations
Create, Update, Deactivate, Groups
Supported Attributes
Not specifiedPlan requirement
Enterprise
Prerequisites
SSO must be configured first
Key limitations
- Duo integration does not support SCIM (SAML only)
- SCIM via Zoho Directory at org level
Documentation not available.
Configuration for Okta
Integration type
Okta Integration Network (OIN) app with SCIM provisioning
Prerequisite
SSO must be configured before enabling SCIM.
Where to enable
Required credentials
SCIM endpoint URL and bearer token (generated in app admin console).
Configuration steps
Enable Create Users, Update User Attributes, and Deactivate Users.
Provisioning trigger
Okta provisions based on app assignments (users or groups).
Docs
SAML SSO available. Provisioning through Zoho Directory at org level.
Zoho Desk gates SCIM behind Enterprise. The upgrade may unlock provisioning, but the workflow still has to complete across the rest of your stack.
Close the workflow gap in
Zoho Desk
Zoho Desk gates SCIM behind Enterprise plan. That can unlock provisioning, but it still does not complete the offboarding, access review, or license workflow across your stack, and it can add a 150% markup just to get there.
Start with the free gap diagnostic


