Custom connectors, built in 48 hours
Do not see your app? Give Iden a service account and the actions you need. Iden builds and maintains a custom connector, usually within 48 hours.
3 min read · Last updated June 2026
If your app is not in the catalog, Iden builds a connector for it. Give Iden a service account and the actions you want to govern, and it ships a working connector, usually within 48 hours, maintained for life.
What Iden needs from you
A scoped service account
An admin or API account Iden can use to read and manage users in the app. Least-privilege is fine; Iden works with the scopes the app allows.
The resources to govern
Which objects matter: users, groups or roles, and fine-grained entitlements (channels, repositories, projects, permission sets).
The attributes to read
Signals you want surfaced for reviews and clean-up, such as last_login, last_used, license or seat type, MFA state, and account status.
The lifecycle actions
What Iden should do: create, update, suspend, reactivate, delete, transfer ownership, and revoke, mapped to your joiner, mover, and leaver flows.
How it works
- 1Tell Iden the app and what you needSend the app and the resources, attributes, and actions you want to govern. A short call is usually enough to scope it.
- 2Provide a scoped service accountIden connects using an admin or API account with least-privilege scopes. Credentials are stored encrypted and never exposed in logs.
- 3Iden builds and tests the connectorIden's team builds against the app's API, or drives its admin UI through the custom automation framework where no API exists, and validates it. Usually within 48 hours.
- 4It runs in your lifecycle, maintained by IdenThe connector joins your joiner, mover, and leaver automation and access reviews. Iden maintains it and updates it when the app changes.
Frequently asked questions
How long does a custom connector take?
Usually 48 hours. Some take up to a week if the app's API documentation is wrong or the auth flow needs vendor negotiation. Iden tells you the timeline up front.
What if the app has no API?
Iden drives the app's admin interface through its custom automation framework, the same way an admin would, with continuous monitoring that detects breakage and ships fixes within hours.
What attributes can Iden read?
Whatever the app exposes: last_login, last_used, license or seat type, MFA state, account status, group membership, and more. These power access reviews and license clean-up.
Is there a per-connector fee?
No. Custom connectors are included, built and maintained by Iden at no extra cost. You never pay per connector.
How are the credentials secured?
The service account runs with scoped permissions, stored encrypted with per-customer key material, rotated on a schedule, and never written to logs or the audit trail.
Request a custom connector
Tell Iden the app and what you want to govern. If your team runs on it, Iden can automate it.
Request a connector