Last updated: April 9, 2021
If you have a HubSpot Enterprise account, you can set up single sign-on using Active Directory Federation Services (AD FS).
To use AD FS to log in to your HubSpot account, you must meet the following requirements:
Please note: this setup process should be done by an IT administrator with experience creating applications in your identity provider account. Learn more about setting up SSO with HubSpot.
Open your Active Directory Federation Services (AD FS) manager:
Before setting up your claims rule, make sure that your users' email addresses match their HubSpot user email addresses. You can use other identifiers, such as the User Principal Name (UPN), if your UPNs are in the form of an email address. In order for single sign-on with AD FS to work, the nameID needs to be in the form of an email address in order to match with a HubSpot user.
Next, set up the Transform an Incoming Claim rule:
In the Replying Party Trusts folder, select Properties from the Actions sidebar menu. Click the Advanced tab and make sure SHA-256 is specified as the secure hash algorithm. Though both SHA-256 and SHA-1 are supported, SHA-256 is recommended.
To access your PEM format x509 certificate:
Please note: if you receive an error when configuring single sign-on in HubSpot, check your event viewer logs on your device for the error message. If you are not able to troubleshoot the error message, contact HubSpot Support.
A supported web browser on a computer is required for full functionality of HubSpot's features. On touch...
HubSpot users with Add & edit users permissions can customize permissions for new and existing users in your...
Users with Modify billing permissions can cancel a HubSpot account subscription. If you have multiple...