Steps to configure SAML SSO for HubSpot

About HubSpot

HubSpot provides inbound marketing and sales solutions to help businesses engage customers by creating and managing their online presence, generating and nurturing leads, tracking customer interactions, and analyzing marketing campaigns to improve business performance.

The following steps will help you enable SAML-based single sign-on (SSO) for HubSpot from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications. For more details, refer to pricing details.
2. Log in to Identity360 as an Admin or Super Admin.
3. Navigate to Applications > Application Integration > Create New Application, and select HubSpot from the applications displayed.
   Note: You can also find HubSpot from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Under Choose Capabilities tab, choose SSO and click Continue.
   General Settings of SSO configuration for HubSpot
6. Under Integration Settings, navigate to the Single Sign On tab and click on Metadata Details.
   • Copy the Entity ID/Issuer URL and Login URL, which will be used during SSO configuration in HubSpot.
   • Download the SSO certificate by clicking the Download button near the Signing Certificate field.
     Integration Settings of SSO configuration for HubSpot

HubSpot (service provider) configuration steps

1. Log in to the HubSpot portal and click the Settings icon.
   Image showing the portal view of HubSpot
2. Under the Account Setup section, click Security and navigate to the Settings & Activity tab.
   Image showing the security settings of HubSpot
3. Click Set up single sign-on (SSO) to view the SSO configuration page.
   Image showing the selection of SSO capability from HubSpot
4. Paste the Entity ID/Issuer URL and Login URL, copied in Step 6(i) of prerequisites, in the Identity Provider Identifier or Issuer URL and Identity Provider single sign-on URL fields, respectively.
5. Paste the contents from the Signing Certificate downloaded during Step 6(ii) of prerequisites in the X.509 Certificate field.
   Image showing the configuration of SAML SSO from HubSpot
6. Copy the portal Id from the Audience URI (Service Provider Entity ID) field.
   Image showing the SP details

Identity360 (identity provider) configuration steps

1. Switch to Identity360's application configuration page.
2. In the Portal ID field, enter the portal Id value copied during Step 6 of HubSpot configuration.
   Integration Settings of SSO configuration for HubSpot
3. Click Save.
4. Assign yourself to the HubSpot application in Identity360 to log in to HubSpot for verification. Click here to learn how to assign users or groups to applications.

Test SSO configuration

1. Navigate to the HubSpot SSO configuration page and click Verify. You will be redirected to Identity360 for authentication.
   Image showing HubSpot connection test
2. If the configuration is successful, HubSpot will display a success message.
3. After completing the SSO configuration, you can assign users to the HubSpot application in Identity360.

Your users should now be able to sign in to HubSpot through the Identity360 portal.