We are considering buildling out the Customer Portal in the Service Hub, but are concerned the portal does not have MFA. Any thoughts on if and when Hubspot will be adding MFA to the customer portal?
MFA is not planned for this year (2024), currently. That said, I'm always open to learning more and will DM you with my meeting link, if you are open to talking. If anyone else would like to talk about their business' requirements, feel free to DM me.
Hi all, I'm the PM of Memberships (which also applies to Knowledge Base and Customer Portal). The SSO provider you choose to use for private content login is different than the SSO you setup for HubSpot portal. If your business requires MFA, we recommend using an SSO provider.
Also agreed. Our organisation has just turned off the usage of any kind of HubSpot function that requires private registration - we were using Private Knowledge Base articles and also had started using the Customer Portal, but not having a way to enforce any kind of MFA on accounts goes against some of our security certifications, so it's a no go! A big shame, as these features perfectly fit our business requirements.
I have just seen that HubSpot plan to move away from Private Registration in favour of Memberships: Membership (hubspot.com). However, no mention in these articles about 2FA/MFA etc.
SSO is mentioned both for the current private registration and new Memberships.My understanding is that SSO is set up at an organisational level. It doesn't/can't really apply for customers who are not a part of your identity provider?
Hi all, I'm the PM of Memberships (which also applies to Knowledge Base and Customer Portal). The SSO provider you choose to use for private content login is different than the SSO you setup for HubSpot portal. If your business requires MFA, we recommend using an SSO provider.
@ankur_gupta Thank you for contributing to this idea. The challenge with using SSO is that many of our clients compliances require MFA. Is MFA on the roadmap for HubSpot Memberships sites?
MFA is not planned for this year (2024), currently. That said, I'm always open to learning more and will DM you with my meeting link, if you are open to talking. If anyone else would like to talk about their business' requirements, feel free to DM me.
This could not be more important in the age of cyber security and basic use of protection of sensitive data. Not to do it is not demostrating commerically reasonable security and puts HubSpot and the customer using the tool at RISK.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.