Iden is an identity governance platform that gives IT and security teams a single place to see and control who has access to every SaaS app their company runs — including HubSpot.

Most teams have no reliable answer to three questions: who has access to HubSpot right now, what can they do there, and should they still have it. Seats get provisioned over Slack, permissions get copied from whoever sat nearby, and departing employees stay active long after their last day. The result is wasted seat spend, failed SOC 2 / ISO 27001 audits, and standing access nobody has reviewed in years.

Iden solves this by connecting directly to HubSpot and keeping a live picture of your users, their permission sets, and their primary and secondary team memberships — mapped back to the real person in your HR system or IdP.

The problems we remove:

- Blind spots. Every HubSpot user, permission set, and team membership is discovered automatically and kept in sync, so access is visible without exporting spreadsheets from Settings.

- Slow, manual onboarding. New joiners request HubSpot access in Iden, the right approver signs off, and Iden creates the user with the correct permission set and teams already applied — no admin ticket queue.

- Orphaned access after offboarding. When someone leaves or changes roles, Iden removes or suspends their HubSpot seat as part of the offboarding run, and flags accounts that no longer match a current employee.

- Painful access reviews. Iden runs scheduled certification campaigns that route each HubSpot account to its manager or app owner for approve/revoke, then executes the revocations and keeps the evidence trail auditors ask for.

- Seat waste. Inactive and unreviewed HubSpot seats surface as reclaimable, so you pay for the licenses you actually use.