SSO for Customer Portal

[MD14]

Hi,

I am trying to implement OIDC workflows in our authorisation server so that users in our application can access their tickets in the Customer Portal.

Both the authorise and token endpoints are invoked and responses are sent as expected but Customer Portal shows up an error page that says there is no permission.

I am not sure what exact details in JWT token are expected by Hubspot server.

I have followed the OIDC section in this guide - https://knowledge.hubspot.com/website-pages/set-up-single-sign-on-sso-to-access-private-content?hubs...

It would be of great help if anyone can guide me to debug the issue further. I can share the sample code that implements the OIDC endpoints.

PS: I have been trying out the sample code in AWS Lambda with Function URLs.

Thanks

- Manjunath

[Jaycee_Lewis]

Hey, @MD14 Setting up SSO using JWT was sunset this year according to this note "Please note: on February 5th, 2025, the ability to use SSO for new JWT applications was sunset. JWT-based applications configured for SSO prior to that date are not affected. Moving forward, it's recommended to use an Open ID Connect (OIDC) application instead" — source.

Best,

Jaycee

[MD14]

Hi Jaycee,

Thanks for the reply.

I have implemented OIDC in our server and as part of that change, we are required to return a token (in JWT format). The issue is that though there are no errors in the API response, the Customer Portal is not loading.

Are there specific information that is required by Hubspot and also is the "Provider Authorisation endpoint and Provider Token endpoint" needs to be hosted in same domain ?

Regards

- Manjunath