Hubspot

This guide covers how to configure Hubspot ↗ as a SAML application in Cloudflare One.

• An identity provider configured in Cloudflare One
• Admin access to a Hubspot Enterprise plan account

1. Go to Settings > Account, then go to Defaults > Security.
2. Select Single Sign-on.
3. Copy the values for Audience URI and Sign on URL.

1. In Cloudflare One, go to Access controls > Applications, select Create new application, and select SaaS application.

2. Set the Application type to Hubspot.

3. Use the following Hubspot field mappings:

   Hubspot values	Cloudflare values
   Audience URI	Entity ID
   Sign On URL	Assertion Consumer Service URL

4. Set NameID to Email.

5. Add any desired Access policies to your application.

6. Copy the SSO endpoint and Access Entity ID.

7. Save the application.

1. Paste the Public key in a text editor.
2. Wrap the certificate in -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----.

1. Use the following field mappings:

   Cloudflare value	Hubspot value
   SSO endpoint	Identity Provider Single Sign-on URL
   Entity ID	Identity Provider Identifier
   Public key	Certificate

2. Select Verify to validate the integration.

Your configuration is now complete. Hubspot SSO can be switched on for specific users or the entire account.