Last updated: May 10, 2022
If you have a HubSpot Enterprise account, you can set up single sign-on using Active Directory Federation Services (AD FS).
To use AD FS to log in to your HubSpot account, you must meet the following requirements:
Please note: this setup process should be done by an IT administrator with experience creating applications in your identity provider account. Learn more about setting up SSO with HubSpot.
Before you begin, take note of the following two values from your HubSpot account to set up SSO using Microsoft AD FS:
Open your Active Directory Federation Services (AD FS) manager:
Before setting up your claims rule, make sure that your users' email addresses match their HubSpot user email addresses. You can use other identifiers, such as the User Principal Name (UPN), if your UPNs are in the form of an email address. In order for single sign-on with AD FS to work, the nameID needs to be in the form of an email address in order to match with a HubSpot user.
Next, set up the Transform an Incoming Claim rule:
In the Replying Party Trusts folder, select Properties from the Actions sidebar menu. Click the Advanced tab and make sure SHA-256 is specified as the secure hash algorithm. Though both SHA-256 and SHA-1 are supported, SHA-256 is recommended.
To access your PEM format x509 certificate:
Please note: if you receive an error when configuring single sign-on in HubSpot, check your event viewer logs on your device for the error message. If you are not able to troubleshoot the error message, contact HubSpot Support.
Thank you for your feedback, it means a lot to us.
HubSpot users with Add & edit users permissions can customize permissions for new and existing users in your...
If you have both Add and edit users and Modify billing permissions in a Sales Hub or Service Hub account, you...
Typically, logging into HubSpot requires just your username and password. With two-factor authentication...