Overview
Connect, configure, and manage applications in Iden.
This section explains how to connect your organization's software tools to Iden, configure how each app is governed, and manage the user accounts Iden finds. By the end, you will have a clear picture of who has access to what - and the tools to take action on it.
Iden connects to your SaaS applications (cloud-based software tools) and pulls in user accounts, groups, and permissions automatically. You can then review access, approve or remove it, and catch risky situations before they become problems.
What you can do with connected apps
- Sync users, groups, and permissions - Iden automatically pulls in the latest access data from every connected app and keeps it up to date
- Run access reviews - periodically check and confirm who still needs access to each app
- Provision and deprovision access - grant or remove access through approval tickets, direct actions, or automated workflows (provisioning means giving someone access; deprovisioning means removing it)
- Detect shadow IT - see apps your employees are using that your IT team has not formally approved or connected
- Classify accounts - label accounts as external (contractors), service (automated systems), or shared (used by multiple people) so your governance rules apply correctly to each type
Connecting an App
Connection types explained: OAuth, Warp, and API/SCIM.
App Settings
Configure alerts, approval routing, workflows, offboarding, and more.
Discovered Apps
Review and manage apps your employees are using outside of IT's control.
External, Shared & Service Accounts
Classify non-employee accounts for accurate governance and offboarding.
Connection types at a glance
Iden uses three methods to connect to apps. The right method depends on what the app supports.
| Type | Best for |
|---|---|
| OAuth | Apps with a standard admin sign-in flow - Slack, GitHub, Google Workspace, Salesforce, and 30+ more. OAuth is a secure sign-in handshake that never stores your password. |
| Warp | Any web app that does not have a public API. Iden uses a secure browser session to connect on your behalf. |
| API / SCIM | Apps that support direct connections using an API key or SCIM endpoint. SCIM (System for Cross-domain Identity Management) is an industry standard for syncing user accounts automatically. |