HubSpot SAML Single Sign-On (SSO) Integration with Drupal as IdP

Overview

This guide will help you integrate Drupal as a SAML 2.0 Identity Provider (IdP) and HubSpot as a Service Provider(SP) using the miniOrange SAML IDP module. This integration enables centralized user management and permission control, allowing users to access multiple applications with a single set of credentials. This module is compatible with Drupal 7, Drupal 8, Drupal 9, Drupal 10, and Drupal 11.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  Composer require 'drupal/miniorange_saml_idp'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange SAML Identity Provider using the search box.
• Enable the module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

• Install the module:

  drush en miniorange_saml_idp

• Clear the cache:

   drush cr

• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

• Navigate to Extend menu on your Drupal admin console and click on Install new module button.
• Install the Drupal SAML IDP 2.0 Single Sign On (SSO) - SAML Identity Provider module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_saml_idp/idp_setup

Configuration Steps

Drupal SAML IdP Metadata:

• After installing the module on your Drupal site, in the Administration menu, navigate to Configuration → People → miniOrange SAML IDP Configuration. (/admin/config/people/miniorange_saml_idp/idp_setup)

• Navigate to the IDP Metadata tab. Copy the Entity ID/Issuer, SAML Login URL, and X.509 Certificate. Keep it handy. (This is required in order to set up Monday.com as a SAML SP)

Configure HubSpot as Service Provider

• Sign into your Hubspot dashboard.
• To enable SSO, choose an account from the list below.

• In the top right corner, click on the Settings icon.

• Select Account Defaults from the left sidebar menu.

• Navigate to the Security tab and click on Set up single sign-on.

• From the Set up single sign-on panel in HubSpot, copy the Audience URI(Service Provider Entity ID) and Sign on URL, ACS URL, Recipient, or Redirect.

• Now, paste the previously copied IDP-Entity ID / Issuer, SAML Login URL, and X.509 Certificate from Drupal into the Identity Provider Identifier or Issuer URL, Identity Provider Single Sign-on URL, and X.509 Certificate textfield.

IDP-Entity ID / Issuer	Identity Provider Identifier or Issuer URL
SAML Login URL	Identity Provider Single Sign-on URL
X.509 Certificate	X.509 Certificate

Configuring Drupal as SAML Identity Provider (IdP):

• Navigate to the Service Provider Setup tab of the Drupal SAML IDP module.
• Scrolldown and paste the previously copied Audience URI(Service Provider Entity ID) and Sign on URL, ACS URL, Recipient, or Redirect from HubSpot into the SP Entity ID or Issuer and ACS URL respectively.

• Scrolldown and click on the Save Configuration button.
• Now click on the Test link to verify your configuration. If your configurations are correct then you will get the homepage of the HubSpot site in the test configuration window.

You have successfully configured HubSpot as SAML Service Provider and Drupal as SAML Identity Provider.