Calendly keeps its identity and compliance controls in the top two tiers. Single sign-on is available to Teams customers as a paid add-on and to Enterprise customers, while user provisioning, domain control and the audit log are Enterprise features.[10] Several of these controls change how seats are consumed, which is the reason they matter to licence management.
Entitlement summary
| Control | Plans | Notes |
|---|---|---|
| SAML SSO | Teams with SSO add-on, Teams Plus with SSO add-on, Enterprise[1] | Owner or Admin sets it up; SAML 2.0 |
| SCIM provisioning | Enterprise[2] | SSO must be enabled first |
| Group provisioning | Enterprise[3] | Needs SCIM and SSO |
| Domain Control | Enterprise[4] | Needs SSO enabled |
| Activity log | Enterprise[6] | Owners and admins only |
| Data deletion API | Enterprise[10] | Listed on the pricing page |
| Bulk user deletion | Enterprise[9] | Requested through the Customer Success Manager |
| SMS turn-off | Enterprise[8] | Requested through the Customer Success Manager |
The pricing page lists SAML SSO as an add-on for Teams and as included for Enterprise, and does not publish a price for the add-on.[10]
Single sign-on
Calendly’s SSO uses SAML 2.0 and supports service-provider-initiated and identity-provider-initiated login. It works with any SAML 2.0 identity provider, and Calendly documents Okta, OneLogin, Ping Identity, Auth0, Microsoft Entra ID and Duo.[1] Points that bear on licensing:
- The requester must be on the Teams plan with the SSO add-on, or on Enterprise, and be an Owner or Admin.[1]
- If a company has more than one Calendly organization, SSO must be set up for each organization separately.[1]
- Just-in-time provisioning is not supported. New users are added in both the identity provider and Calendly, and must accept their Calendly invitation before logging in with SSO.[1]
- Without SCIM, removing a user needs action in both systems, and a removed user reverts to a Calendly Free account.[1]
- Enabling SSO signs all users out; users who are not in the identity provider cannot log in afterwards. The session timeout is 21 days by default, and multi-factor authentication is configured in the identity provider.[1]
SCIM provisioning
SCIM lets the identity provider add, update, deactivate and remove users and place them in groups. Calendly supports any SCIM 2.0 provider and documents Okta, OneLogin and Microsoft Entra ID. It requires the Enterprise plan and SSO.[2]
Seats. The seat count governs provisioning. Calendly tells administrators to check the number of users and available seats before provisioning, because if all seats are full provisioning fails and the identity provider shows an error. A provisioned user receives an invitation, and takes one of the open seats only after accepting it and signing in with SSO.[2] Because Enterprise seat changes are made through the account manager rather than self-service, seat headroom has to be arranged before a large joiner wave.[14]
Removal. With SCIM on, users can be removed only through the identity provider. A deactivate action removes access but can be reversed; a delete action permanently removes the user from the organization.[2] Calendly’s Help Center notes that in some organizations deactivated or SCIM users may still occupy seats and block new invitations.[15]
Groups. Group provisioning maps identity-provider group values to Calendly groups, for accounts using both SCIM and SSO.[3]
Domain Control
Domain Control lets an Enterprise organization review all Calendly accounts that use its company email domain, require approval before new users sign up, and lock the domain. It needs SSO and an Owner or Admin on Enterprise, there is no limit on the number of verified domains, and when the seat limit is reached more seats must be added before a request is approved.[4] A verified domain also yields a report of all Calendly users with that domain, including those outside the organization. Only users with solo accounts can be invited into the organization through a standard invitation.[5] For an inventory, this report is the nearest equivalent of a discovery of unmanaged Calendly use.
Activity log and deletion
Owners and admins on Enterprise have an activity log recording the category, action, actor and time of changes, covering categories such as API tokens, calendars, compliance data deletions, event types, groups, login, managed events, permissions, routing forms, settings (including SAML and SCIM changes and Domain Control), teams and user management.[6] Enterprise customers can request bulk deletion of users by submitting a spreadsheet of email addresses to their Customer Success Manager; deleted accounts cannot be recovered and the account owner cannot be deleted.[9]
SMS credits
Text messaging is metered. Non-Enterprise plans receive 250 SMS credits per seat per month (three seats give 750), and Enterprise plans receive 1,000 per seat per month. A message costs zero, one, three or nine credits depending on the destination country: Canada, the United States and affiliated territories cost zero, the United Kingdom and Australia cost one, much of Europe and Japan cost three, and many other countries cost nine.[7] The organization owner is emailed at 90 percent usage; at 100 percent texts stop and Calendly sends emails instead, and credits reset on the first of each month at 12 a.m. UTC. Calendly says that adding seats raises the monthly allowance and that Enterprise limits can be customized.[7] The Customer Terms add that SMS use is monitored and can be limited per user per month.[12] See SMS credit.
Enterprise contract mechanics
The pricing page states that the Enterprise plan starts at USD 15,000 per year and 50 seats, is available in USD only, and includes onboarding and implementation and dedicated account support.[10] Under the Customer Terms, customers on the Enterprise Plan Tier or billed by invoice must give Calendly thirty days’ written notice before the end of the current term to change plan tier, the number of licences or the terms of an Order Form, or to end the service, and may face a price increase for such modifications.[12] Renewal terms equal the previous period and may carry an increase of the Consumer Price Index plus 3 percent unless Calendly notifies a different rate.[12] A signed Master Services Agreement, if one exists, replaces these terms for the customer.[12]
Out of scope
This article does not cover the technical configuration for each identity provider, Calendly’s security certifications, or the content of the data processing addendum. The Enterprise price and seat floor are covered in the overview article, and the Admin settings page lists where these controls sit in the product.[11]