Hubspot SAML Single Sign-On (SSO) with Magento as SAML IdP . Magento SAML IdP extenstion gives you the ability to use your Magento credentials to login into Hubspot (SP). Here we will go through a step-by-step guide to configure SSO between Hubspot as SP (Service Provider) and Magento as IDP (Identity Provider).

Pre-requisites: Download and Installation

Installation using Composer:

• Purchase the miniOrange SAML IDP Single Sign-On extension from magento marketplace.
• Go to My profile -> My Purchases
• Please ensure you are using correct access keys (My Profile - Access Keys)
• Paste the access keys in your auth.json file inside your project
• Use the below command to add the extension to your project.

  "composer require {module_name}:{version}"

• You can see the module name and list of versions in the selector below the extension module name.
• Run the following commands on command prompt to enable the extension.

php bin/magento setup:di:compile

php bin/magento setup:upgrade

Manual Installation:

• Download the miniOrange SAML IDP Single Sign-On extension.
• Unzip all contents of the zip inside the MiniOrange/IDPSaml directory.

{Root Directory of Magento} app code MiniOrange IDPSaml

• Run the following commands on command prompt to enable the extension

php bin/magento setup:di:compile

php bin/magento setup:upgrade

Steps to configure Hubspot SAML Single Sign-on ( SSO ) Login into Magento 2

1. Configure Application in Hubspot

• Sign into your Hubspot dashboard.
• To enable SSO, choose an account from the list below.

• In the top right corner, click on the Settings icon.

• Select Account Defaults from the left sidebar menu.

• Navigate to the Security tab and click on Set up single sign-on.

2. Setup Hubspot as Service Provider

• Navigate to the IDP Metadata tab of miniOrange SAML IDP extension.
• Copy the IDP-Entity ID / Issuer, SAML Login URL, and download the X.509 Certificate.
• In HubSpot Set up Single Sign-on tab, paste the IDP-Entity ID / Issuer into the Identity Provider Identifier or Issuer URL textfield, the SAML Login URL into the Identity Provider Single Sign-on URL textfield, and the downloaded certificate into the X.509 Certificate textfield.


IDP-Entity ID / Issuer	Identity Provider Identifier or Issuer URL
SAML Login URL	Identity Provider Single Sign-on URL
X.509 Certificate	X.509 Certificate


• Click on the Verify button.

3. Configure Magento as Identity Provider

• In the miniOrage SAML Identity Provider extension, go to Service Provider settings tab of the extension.
• Provide the required settings (i.e. SP Entity ID/Issuer, ACS URL) find to your Service Provider Hubspot and click on Save button to save your configuration.


Note: The Relaystate URL is mandatory if you want to use Identity Provider (IDP)/Magento initiated flow.

4. Attribute Mapping

• In the Magento IDP extension, navigate to the Attribute Mapping tab.
• In the User Attributes section, enter the following information and click on Save .
• You can also add more attributes by clicking on + sign to add attributes.

Name	User Meta Data
username	user_login
displayName	display_name
email	user_email

5. SSO Testing

• Open a new browser or private incognito window and enter your Hubspot URL, which will redirect you to the Magento login screen.
• Enter your Magento credentials and click the log in button.
• If you are redirected to your Hubspot start page and successfully logged in, your configuration is correct.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• Magento SAML Single Sign-On (SSO)
• Magento OAuth Client Single Sign-On (SSO)
• Frequently Asked Questions (FAQs)