Restrict which login methods users can use to access your account

Super Admins can limit which login methods users can use when setting up or signing into their account.

HubSpot offers the following login options:

• Native HubSpot username and password login.
• Social services log ins (e.g., Google, Microsoft, Apple).
• Single Sign-On for Enterprise plans.

Using this feature will limit the login types based on your security needs. For example, if your company uses Google Workspace or Microsoft, you can only allow these login types.

Set up allowed login methods

Login methods can be set up using the login settings wizard, or directly in the settings of your account.

Set up allowed login methods using the login settings wizard

To set up the allowed login methods using the login settings wizard:

• In your HubSpot account, click the settings settings icon in the top navigation bar.

• In the left sidebar menu, navigate to Security.

• Click the Settings & Activity tab.

• Under Login, click Setup Portal Login Settings.

• If you would like to set up single sign-on, click Set up SSO and click Next. Learn more about setting up SSO.

• To set up another login method (e.g., HubSpot email and password, Google, Microsoft), click Not now, then click Next.

• Select the login methods you'd like to use, the date it should be enforced from, and any users you'd like to exempt from the login method, then click Next.

  • You can choose more than one login method.
  • If selecting today's date as the enforcement date, it may take up to 15 minutes before the login method is enforced.

• Select how long you'd like to keep your users logged in for. If a user is inactive for the selected amount of time, they will be prompted to log in again when they next try to access their account. The minimum value is 15 minutes, and the maximum is three days. Click Next.

• Select whether you'd like to restrict logins by IP address. 

  • If selecting Yes, set up, add the allowed IP addresses, and any users you'd like to exempt from IP address restriction.

• Click Next.
• A confirmation page will be displayed. Click Done to exit the wizard.

Users affected by the change will receive an email notification of which login methods are allowed, and the enforcement date associated. The next time they are required to log in, they will be limited to the methods enforced.

Set up allowed login methods in settings

To set up the allowed login methods in your settings:

• In your HubSpot account, click the settings settings icon in the top navigation bar.

• In the left sidebar menu, navigate to Security.

• Click the Settings & Activity tab.

• Under Allowed login method, toggle the switch on.

• Select the checkboxes next to the login methods you want to use. You can choose more than one login method. Then click Save.

• Select the date the login methods should be enforced from in the dialog box, then click Save. 

  • If selecting today's date as the enforcement date, it may take up to 15 minutes before the login method is enforced.

Users affected by the change will receive an email notification of which login methods are allowed, and the enforcement date associated. The next time they are required to log in, they will be limited to the methods enforced.

Manage exempt users

To manage users that are exempt from the login method:

• In your HubSpot account, click the settings settings icon in the top navigation bar.

• In the left sidebar menu, navigate to Security.

• Click the Settings & Activity tab.

• Under Allowed login method, click Manage exempted users. If the toggle is off, this option won't display.
• Click the dropdown menu and select the users who'll be exempt, then click Save.

Update the allowed login methods

To update the allowed login methods:

• In your HubSpot account, click the settings settings icon in the top navigation bar.

• In the left sidebar menu, navigate to Security.

• Click the Settings & Activity tab.

• Select the checkboxes next to the login methods you want to update, then click Save.

• If you have selected a new login method, select the date the login methods should be enforced from in the dialog box, then click Save. 

  • If selecting today's date as the enforcement date, it may take up to 15 minutes before the login method is enforced.

Users affected by the change will receive an email notification of which login methods are allowed, and the enforcement date associated. The next time they are required to log in, they will be limited to the methods enforced.

Turn off all restricted logins

To turn off restricted logins:

• In your HubSpot account, click the settings settings icon in the top navigation bar.

• In the left sidebar menu, navigate to Security.

• Click the Settings & Activity tab.

• Under Allowed login method, toggle the switch off.
• Click Save.