Does Auth0 support Hubspot SSO?

[nandha.kumar]

Does Auth0 support Hubspot SSO? I’m planning to integrate SSO with Hubspot for our Angular Web app.

[praveen.addepally]

Hello,
Based on the below docs it looks like Hubspot support SAML 2.0 protocol which Auth0 supports.

Set up single sign-on (SSO)

So you should be able to integrate Hubspot app with Auth0.

Reg. integrating Angular spa app, you should be able to integrate this app using OIDC/OAuth & can to provide SSO between Angular app/Hub spot by using the Auth0 universal login.

Hope that helps!

-Praveen.

[flip]

Hi Praveen,

I tried above link, and it looks like this is working. But after the SSO logs in to Hubspot.
I get this as error.

Something went wrong

Your identity provider is configured with an incorrect or missing setting.

Error: MISSING_EMAIL_IN_RESPONSE

Email Address not found in NameID property.

I expect this is because Hubspot needs the email to map the user with Hubspot.
But how can I sent this email to Hubspot.

In `Addon: SAML2 Web App → Settings I added:

{
  "mappings": {
    "user_id": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier",
    "email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
    "name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"
  }
}

What should pass it to Hubspot isn’t it?

[flip]

I fixed it by setting email as username : Map SAML Attributes with Auth0 as IdP/SAML Add-on

[tools_admin]

Hi,

Could you please elaborate on this, I am still facing the same error.

[shea]

Follow the instructions here: Auth0 integration to HubSpot - #5 by benjamin9T

Then in your mappings (addons->saml) it should have this:
“mappings”: {
“email”: “http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier”,
}

That worked for me.

[cstill]

I received the following instructions from Auth0 support, and it enabled me to successfully verify in HubSpot.

Please go to your Dashboard > Auth Pipeline > Rules and create there a new rule with the following script:

function mapSamlAttributes(user, context, callback) {

context.samlConfiguration.mappings = {

"[http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier](https://protect-us.mimecast.com/s/gHbICqx5vJfz1xowiXTAXx?domain=schemas.xmlsoap.org)": "email",

};

callback(null, user, context);

}

Then save the rule

[konrad.sopala]

Thanks for sharing it with the rest of community!