Single Sign-On (SSO) app allows you to protect your HubSpot content from unauthorized user / visitors by restricting access to HubSpot content ( websites, landing pages, blogs, Knowledge base and more ). Single Sign-On app also provides an option to sync the SSO user’s profile into HubSpot contacts.

Here we will go through a guide to configure SSO between HubSpot and your Identity Provider. By the end of this guide, users should be able to login to HubSpot from your Identity Provider. To know more about miniOrange HubSpot OAuth Single Sign-On plugin and other HubSpot Integrations, you can click here.

Feel free to contact us at hubspotsupport@xecurify.com to know more about how to install the miniOrange HubSpot OAuth Single Sign-On app.

 We provide Single Sign-On (SSO) with multiple OAuth providers, such as:

Pre-requisites : Download And Installation

• Log into your HubSpot account as an admin.
• Click here to install miniOrange HubSpot OAuth Single Sign-On (SSO) app or you can install our app from HubSpot Marketplace .

Step 1: Configure Single Sign-On into the HubSpot pages.

• Go to the HubSpot Dashboard and click on App Configurations tab.

• Here, select your application and click on it. If your app is not present here you can create a custom OAUTH 2.0 or OIDC (Open ID Connect protocol) app as per your provider's implementation.

• Enter the Login Button Text and copy the Callback URL to set up the Identity Provider ( Third Party App) you would like to authenticate with.

• Now, to set up Single Sign-On ( OAuth SSO ) from the Identity Provider, you will need to enter the Client ID, Client secret,and Scope, and enable Send in Header and Endpoints.

• When you have filled out all the details, click the Save & Test Configuration button.

• On successful authentication, you will see the list of User Profile details.

Step 2: Configure Page Restriction into the HubSpot ( Website, Landing Pages, Blogs, Knowledge Base )

Our Page Restriction feature allows you to protect your HubSpot website from unauthorized access. It is useful for securing sensitive information. Using this method, you can restrict access to HubSpot pages/content. Visitors will need to sign in before accessing HubSpot pages.

• After you have received the test configuration result, click on the Page Restriction tab.

• Select the checkbox next to the page you wish to protect from unauthorized users and click Save to save the information.

• Once you go to the page URL that you restricted, you will see the login window of your identity provider where you'll enter your credentials.

• After logged in, you will be redirected successfully to the website page.

Step 3: Configure Contact Sync in HubSpot

Contact synchronization is a powerful feature that enables seamless integration and synchronization of contact information between HubSpot and external platforms or applications. With Contact Sync, you can ensure that your customer data is up to date, accurate, and consistent across multiple systems, saving you time and eliminating manual data entry.

• To sync the contact details, go to the APP Configurations tab and choose the provider you created.
• Click on the Edit icon below the Contact Attribute Mapping option.

• You will see the HubSpot Contact Attributes and IDP Attributes option, Map your HubSpot contact attribute with a third-party application / IDP attribute received in the test configuration result. Additionally, if multiple attributes are required, you can add them using the Custom Attribute Mapping option.

• After adding all the attributes, make sure you have enabled the Contact sync option. Click on the Save button.

• You can now find the contact in HubSpot Contacts. This is a great way to generate leads, as it allows you to quickly and easily add new contacts to your HubSpot sales and marketing pipelines. Contact sync allows you to ensure that your HubSpot account is always updated with the latest information about your leads and customers (site visitors), which can help you generate more qualified leads.

Step 4: Track your Visitors / Login Audit

Using the login audit feature, administrators can monitor and track user login activities. The audit log records and stores every login attempt, whether successful or unsuccessful. This log provides a detailed overview of login activities, including user information, IP addresses, device details, and timestamps.

• To track your visitors, go to the contact attribute mapping option against your application.

• Enable the login audits for this application option and click on the Save button.

• When users log in using single sign-on, their logins are stored in the login audit tab. To see user details, click on the Login Audit tab. Here you will find all the details about the user. Similarly, you can track the visitors to every application in the same way

Step 5 : Configure Multiple IDPs / Social Logins

• You can configure multiple Identity Providers from the Add configuration screen by following the same steps.

• If you go to your restricted page, you will see the identity provider login button you configured you can select your provider which you need to log in and click on it.

• Once you logged in using your Identity Provider credentials, you will get access to your HubSpot page.

Step 6: Enable Membership contact list based / Members only access to HubSpot content

Role Based Page Restriction is a method used in web applications or content management systems to control access to specific pages or sections of a website based on the roles or permissions assigned to individual contacts (users).

That is, after successful SSO, instead of giving access to anyone, only contacts who have permission for that page can view the page.

To set up the Role-Based Page Restriction, please click here.

Additional Resources

• HubSpot Single Sign-On
• HubSpot Security and API Integration
• HubSpot Page Protection
• Restrict HubSpot Knowledge Base Content