Automate Splashtop provisioning, with or without SCIM, using Iden

Iden connects Splashtop via OAuth integration and automates the full lifecycle, on any plan.

2 min read · Last updated June 2026

OAuthNo SCIM requiredAny planJust-in-time accessAudit trailLicense reclamation

Iden automates Splashtop without SCIM. Splashtop only offers SCIM on its Enterprise plan, so most tools either make you upgrade or leave Splashtop manual. Iden connects Splashtop through OAuth integration and handles provisioning, deprovisioning, and access reviews on any plan, with a full audit trail. This is the non-SCIM coverage SCIM-only tools do not have.

How Iden connects Splashtop

Iden connects to Splashtop through its OAuth model, using Splashtop's own scopes to provision, update, suspend, and deprovision users and manage their access. No SCIM and no enterprise upgrade required, it works on any Splashtop plan.

What Iden automates in Splashtop

Licensesread

License assignmentread

Groupsread

Group membershipread

Usersread, create, delete, update

Every action is logged to an exportable audit trail for SOC 2 and ISO 27001 evidence.

Automate the full Splashtop lifecycle

Provisioning is the start. Iden automates the whole lifecycle for this app: joiner, mover, and leaver workflows, access requests that replace manual tickets, permission updates as roles change, and access reviews with the evidence an auditor accepts.

Onboard to Splashtop on day one

New hires get the right Splashtop access the moment HR marks them active, mapped to their role. No setup ticket, no waiting on IT.

Keep Splashtop permissions right as roles change

When someone changes team or title, Iden updates their Splashtop access and group membership to match, and strips what they no longer need.

Offboard from Splashtop in seconds

The moment someone becomes a leaver, Iden revokes Splashtop access and ends their sessions, with a timestamped record for the audit.

Turn Splashtop access requests into automated approvals

Requests route to the right owner, get approved in chat, and provision in Splashtop automatically. No manual ticket to work, no copy-paste.

Run Splashtop access reviews with evidence

Iden pulls who has what in Splashtop, sends reviewers a one-click certification, and revokes what they reject, with proof for SOC 2 and ISO 27001.

Grant time-bound Splashtop access

Give temporary or just-in-time Splashtop access that expires on its own, so standing privilege never piles up.

Find and clean up orphaned Splashtop accounts

Iden flags Splashtop accounts with no matching active employee, including shared and service accounts, so nothing lingers after someone leaves.

Right-size Splashtop access to least privilege

See who has more Splashtop access than their role needs, and pull it back to what the job actually requires.

Cut wasted Splashtop spend and shadow access

Governance is not only provisioning. Iden also helps you cut what you overspend on this app and catch access that never came through IT.

Reclaim unused Splashtop licenses and cut spend

Iden reads Splashtop license assignments, so it flags paid seats held by inactive or departed users and reclaims them as part of offboarding and reviews. You stop paying for Splashtop seats nobody uses.

See who actually uses Splashtop

Where Splashtop reports last login or activity, through its API or admin console, Iden surfaces it so reviews and license clean-up target the accounts that sit idle.

Catch shadow access in Splashtop

Iden reconciles every Splashtop account against your directory to surface local logins, external guests, and accounts created outside your process, the access that never came through IT.

How to set up Splashtop with Iden

1Connect your source of truthIden reads joiners, movers, and leavers from your HRIS and current access from your identity provider.
2Connect SplashtopIden connects Splashtop via OAuth integration, with no enterprise plan upgrade required.
3Set access and review policyMap who should have Splashtop access by role, and how often that access is reviewed.
4Automate the lifecycleNew hires get Splashtop access on day one, leavers are revoked in seconds, and every change is logged.

The Splashtop SCIM tax (which you skip)

If you took the SCIM route, Splashtop gates it to the Enterprise plan (Contact Sales), up from Pro: $8.25/u/mo (annual). With Iden you connect Splashtop via OAuth integration instead, on any plan, so this cost does not apply.

Source: SCIM Tax Index (Splashtop pricing), verified 2026-06-12.

How SCIM provisioning works with Iden

SCIM (System for Cross-domain Identity Management) is the industry-standard protocol for automated provisioning. Where an app supports SCIM, Iden connects to its SCIM endpoint with a token and keeps the app in sync with your source of truth in real time, the same standard integration every identity provider uses.

Create usersNew hires are provisioned into the app automatically the moment they join or are assigned a role.

Update attributesProfile, role, and department changes flow through, so the app stays aligned with your HRIS.

Deactivate and reactivateA leaver's access is suspended automatically, and restored just as fast if they return.

Push groups and membershipGroups and their members are pushed and kept in sync, so access follows role, not manual edits.

Attribute and role mappingDirectory attributes map to the app's fields. No CSV uploads, no manual data entry.

Setup is a one-time connection: turn on SCIM in the app, generate a token, and Iden runs provisioning from then on. SCIM handles the plumbing. Iden adds the governance layer on top: access reviews with evidence, time-bound and just-in-time access, and provable offboarding. Iden supports SCIM by default for every SCIM-capable app. The real question is what happens when an app has no SCIM, or gates it behind an expensive tier, which is exactly what the connector above handles.

Frequently asked questions

How does Iden connect Splashtop?

Iden connects Splashtop via OAuth integration. It works on any plan, no SCIM required.

Do I need the Splashtop Enterprise plan to automate provisioning?

No. Splashtop gates SCIM to its Enterprise plan (Contact Sales), but Iden connects via OAuth integration on any plan, so you do not have to pay the SCIM tax to automate Splashtop.

How does Iden deprovision Splashtop users at offboarding?

When someone is marked as a leaver in your HRIS, Iden revokes their Splashtop access automatically, in seconds, and records it in an exportable audit trail for SOC 2 and ISO 27001 evidence.

Can Iden replace manual Splashtop access request tickets?

Yes. Splashtop access requests route to the right owner for one-click approval and then provision automatically, so there is no manual ticket to work and access is granted in minutes, not days.

Can Iden grant temporary or just-in-time Splashtop access?

Yes. Iden can grant time-bound Splashtop access that expires on its own, so people get access when they need it and standing privilege does not accumulate.