Single Sign-On (SSO) for private content from 2 identity provider accounts

[btran_dschch]

Hi,
We are trying to set up Single Sign-On (SSO) for private content for landing pages, websites.
Does anyone know if we can set up SSO for the same private content log in from 2 sources of identity provider accounts:

• Autho0
  
• Azure Active Directory (Azure AD)

I follow this docs but unsure if we can have 2 identity provider accounts setup for private landing pages, websites in Hubspot:
https://knowledge.hubspot.com/website-pages/set-up-single-sign-on-sso-to-access-private-content#set-...
Thanks in advance.

[rajsso]

Setting up SSO with multiple identity providers like Auth0 and Azure AD sounds like a great way to give users flexibility while maintaining security. It’s awesome that you’re working on integrating this for private landing pages and websites. From what I know, many platforms do allow multiple identity providers, but it can depend on how the integration is configured. If you’re unsure, I’d recommend reaching out to HubSpot support or checking their documentation on multi-SSO setup to confirm. Rajasthan SSO

[abhiladdha07]

Hi @btran_dschch and other visitors,

Yes, HubSpot only supports SSO with a single Identity Provider and only supports SAML and JWT, not the OAuth and OpenId protocol for Single Sign-On (SSO).

So, for this you can use miniOrange's Single Sign-On (SSO) for HubSpot app's Enterprise SSO feature to configure as many Identity Providers you want like Azure AD, Auth0, Okta, KeyCloak, Google, AWS Cognito, Facebook, LinkedIn, Apple and a lot more along with custom Identity Provider as well. You can read more from here.

You can reach out to hubapps@xecurify.com to contact miniOrange app team to help you out for for your requirements.

Best,

Abhishek

[Jaycee_Lewis]

Hey, @btran_dschch 👋 Thanks for the question. Looking at the documentation, you are limited to one identity provider per subdomain — “SSO can be configured for one HubSpot-hosted subdomain per identity provider account. For best results, it's recommended to dedicate one subdomain for SSO membership only.” 

My suggestion, as this is a feature limited to accounts who also have access to support, is to file a ticket with them to get more clarity. To avoid getting deflected back here for peer-to-peer support, you can frame your question as not being custom code or implementation related, but specific to the number of identity providers. 

Best,

Jaycee