Multiple "Switched Between HubSpot Accounts" Login Failures
SOLVE
Hi everyone,
Over the past few days, we've been receiving a high volume of audit log alerts titled "Multiple failed logins in the last hour" in our HubSpot account. When we reviewed the audit logs, we found something odd:
- Login Type: “Switched between HubSpot accounts”
- Users affected: Multiple legitimate users across Europe
- Login method: All are SSO-only, using a single HubSpot account
None of them has access to any other HubSpot accounts or sandboxes
This started happening suddenly and simultaneously across users in different regions (Italy, Romania, Bulgaria, etc.), and none of the users attempted to switch accounts themselves.
Any advice or insight into what may be triggering this failure log for users who have never had more than one account?
When users log in through Single Sign-On (SSO), HubSpot may sometimes interpret session refreshes, timeouts, or activity across multiple tabs or browsers as attempts to switch accounts, even if the user is associated with only one account.
This can happen if session tokens or cookies are being invalidated or expiring more frequently, potentially due to recent changes in your identity provider’s (IdP) configuration, browser settings, or device-related updates. As a result, HubSpot may mistakenly log a standard reauthentication as a "switch account" event.
Here are a few recommended troubleshooting steps that you can try to fix the issue -
1. Review Your SSO Provider Logs Check your identity provider (e.g., Azure AD, Okta, etc.) for failed authentications or session timeouts that align with the timestamps of the HubSpot alerts.
2. Check Browser & Extensions Ask affected users to:
Avoid using multiple tabs while logging into HubSpot
3. Test on Alternate Browsers/Devices Have users try logging in via a different browser or device to rule out any local configuration issues.
If none of the above steps resolve the issue, I recommend contacting HubSpot Support directly. Provide them with specific user details and timestamps so their team can investigate potential backend session or logging issues on their end.
✅ If my reply answered your question, please mark it as a solution to make it easier for others to find.
When users log in through Single Sign-On (SSO), HubSpot may sometimes interpret session refreshes, timeouts, or activity across multiple tabs or browsers as attempts to switch accounts, even if the user is associated with only one account.
This can happen if session tokens or cookies are being invalidated or expiring more frequently, potentially due to recent changes in your identity provider’s (IdP) configuration, browser settings, or device-related updates. As a result, HubSpot may mistakenly log a standard reauthentication as a "switch account" event.
Here are a few recommended troubleshooting steps that you can try to fix the issue -
1. Review Your SSO Provider Logs Check your identity provider (e.g., Azure AD, Okta, etc.) for failed authentications or session timeouts that align with the timestamps of the HubSpot alerts.
2. Check Browser & Extensions Ask affected users to:
Avoid using multiple tabs while logging into HubSpot
3. Test on Alternate Browsers/Devices Have users try logging in via a different browser or device to rule out any local configuration issues.
If none of the above steps resolve the issue, I recommend contacting HubSpot Support directly. Provide them with specific user details and timestamps so their team can investigate potential backend session or logging issues on their end.
✅ If my reply answered your question, please mark it as a solution to make it easier for others to find.