HubSpot SAML Single Sign-On (SSO) | Login into HubSpot using WordPress

Overview

HubSpot Single Sign-On (SSO) with WordPress as SAML IDP. miniOrange SAML IDP plugin for WordPress (WP as SAML IDP) gives you the ability to use your WordPress (WP) credentials to login into HubSpot (SP). Here, we will go through a step-by-step guide to configure HubSpot SSO by considering WordPress as IDP (Identity Provider) and HubSpot as SP (Service Provider). To know more about other features we provide in miniOrange SAML IDP plugin for WordPress (WP as SAML IDP), you can click here.

Pre-requisites : Download And Installation

• To configure WordPress as SAML IDP and HubSpot as SP with WordPress, you will need to install the miniOrange SAML IDP plugin for WordPress (WP as SAML IDP).

Configuration Steps

Step 1: Configure WordPress (WP) as IdP (Identity Provider)

• Login to your HubSpot account as an administrator.
• Click the Settings gear icon & scroll down to the Single Sign-on section, then click on Set up.
• In the right panel, click Copy next to the values as needed.

• Now, go to the miniOrange SAML IDP plugin for WordPress, navigate to the Service Provider tab.

• Enter the values corresponding to the information from HubSpot. Refer to the table below.

Service Provider Name	HubSpot
SP Entity ID or Issuer	Copy and paste the Audience URI (Service Provider Entity ID).
ACS URL	Copy and paste the Sign on URL, ACS, Recipent, or Redirect URL.
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Checked

• Click on the Save button to save your configurations.
• Navigate to the IDP Metadata tab, here you can find Identity Provider Metadata URL / XML or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate for SP configuration.

• You have successfully configured WordPress as IDP for HubSpot SSO.

Step 2: Configure HubSpot as SP (Service Provider)

• Navigate to your HubSpot account.
• In the Admin console and click on Settings iconin the main navigation bar.

• In the left sidebar menu, select Account Defaults and click on the Security section.
• In the Single Sign-On section, click on Set Up button.

• Enter the following metadata values in the respective fields from the IDP Metadata tab of the WP as SAML IDP plugin.

Identity Provider Identifier or Issuer URL	Copy and paste the IDP-EntityId / Issuer from the IDP Metadata tab of the plugin.
Identity Provider Single Sign-On URL	Copy and paste the SAML Login URL / Passive Login URL from the IDP Metadata tab of the plugin.
X.509 Certificate	Download the certificate from the plugin. Copy and paste the content from that file here.

• Click on Verify.

• In the left sidebar, click on Account Details.
• In the Single Sign-On section, select the Require Single Sign-On to log in check box.

You have successfully configured HubSpot as Service Provider.

Step 3: Testing SSO

• Launch your HubSpot URL in new incognito tab.
• This will be redirected to the WordPress login page, provided in the configuration.
• The authentication will be validated by the Identitiy Provider.

If you were able to log into HubSpot, then your configuration is correct.

In this Guide, you have successfully configured HubSpot Single Sign-On (SSO) using WordPress as IDP and HubSpot as SP. This solution ensures HubSpot login with WordPress using WordPress login credentials within minutes. You can log in to HubSpot with WordPress IDP credentials through SAML SSO.

Related Articles

• What is Single Sign-On (SSO)?
• What is SAML?
• HubSpot Single Sign-On (SSO)
• Frequently Asked Questions (FAQs)