Which CRMs include single sign-on as standard?
Very few. Single sign-on is the classic enterprise-tier upsell: a security control that costs the vendor almost nothing to ship, held back to make the top plan look worth it.
Chorum.io includes Microsoft single sign-on on every tier, starting at £19 per user per month. HubSpot requires a Professional or Enterprise subscription for single sign-on across all of its hubs, according to its own documentation.
If your team already signs into Microsoft 365 every morning, that is one less password to manage, one less account to remember to disable when somebody leaves, and one fewer awkward line in a security questionnaire.
Why this is worth caring about
It is a small feature with disproportionate consequences.
Leavers actually leave
Disable the Microsoft account and access goes with it. No separate list of who still has a login to the CRM three months after they resigned.
- One place to revoke
- Fewer orphaned accounts
People use what they can get into
A separate password is a small barrier repeated every day. One-click sign-in is a genuine driver of whether a CRM gets used at all.
- No password reset queue
- Faster onboarding
Shorter security questionnaires
Identity, audit logging and role-based access are standard here, so the answers are yes rather than a note about upgrading.
- Audit logging as standard
- Role and record-level access
Be careful what "SSO" means when you compare
The term covers a range of things, and vendors are not always precise about which they mean. Ours, stated plainly.
What Chorum.io does today: Microsoft single sign-on. If your organisation runs Microsoft 365, your people sign in with their work account, on any tier.
What Chorum.io does not do yet: SAML with other identity providers such as Okta, Google Workspace or Ping, and SCIM automated user provisioning. Both are on the roadmap and neither is available today.
So if your requirement is Microsoft 365 sign-in, we cover it and we do not charge extra. If your requirement is an Okta integration or SCIM provisioning written into a procurement document, we are not there yet and you should discount us accordingly. We would rather tell you now than at the security review.
Worth noting the other side of that comparison fairly: HubSpot's single sign-on supports a wider range of identity providers than ours. Their constraint is the tier it sits behind, not the capability.
Other things included rather than upsold
Single sign-on is not the only one.
- Audit logging with retention, on every tier
- Role and company-level access control, so people see the records they should
- Contract templates with tokenised e-signing, which means no separate e-signature subscription
- Notifications in-app, by browser push and by email
- UK data residency, by default rather than as a paid region
Starter is £19 per user per month with one module, Professional £29 with two, and Enterprise £39 with all six. Additional modules on Starter or Professional are £5 per user per month. Excluding VAT, current as at 26 August 2026. Nothing in the list above changes those numbers.
Common questions
Sources
HubSpot single sign-on tier requirement: HubSpot Knowledge Base, Set up single sign-on, checked 26 August 2026. Chorum.io pricing: chorum.io/pricing, per user per month excluding VAT, current as at 26 August 2026. Vendor packaging changes regularly, so check any product directly before deciding.