Last updated: April 9, 2021
If you have a HubSpot Enterprise account, you can set up single sign-on using Active Directory Federation Services (AD FS).
To use AD FS to log in to your HubSpot account, you must meet the following requirements:
Please note: this setup process should be done by an IT administrator with experience creating applications in your identity provider account. Learn more about setting up SSO with HubSpot.
Open your Active Directory Federation Services (AD FS) manager:
Before setting up your claims rule, make sure that your users' email addresses match their HubSpot user email addresses. You can use other identifiers, such as the User Principal Name (UPN), if your UPNs are in the form of an email address. In order for single sign-on with AD FS to work, the nameID needs to be in the form of an email address in order to match with a HubSpot user.
Next, set up the Transform an Incoming Claim rule:
In the Replying Party Trusts folder, select Properties from the Actions sidebar menu. Click the Advanced tab and make sure SHA-256 is specified as the secure hash algorithm. Though both SHA-256 and SHA-1 are supported, SHA-256 is recommended.
To access your PEM format x509 certificate:
Please note: if you receive an error when configuring single sign-on in HubSpot, check your event viewer logs on your device for the error message. If you are not able to troubleshoot the error message, contact HubSpot Support.
Learn how to export HubSpot content and data from your account, such as pages, contacts, and files. Please...
There are multiple ways to log in to HubSpot; enter an email...
When you create a custom property in HubSpot, the type of information you want the property to collect and...