Custom SCIM Integration

What is it?

Provisioning users through SCIM (System for Cross-domain Identity Management) provides a secure and automated way to create and manage HubSpot users, speeding up the process and helping to get new users into HubSpot.

The Custom SCIM Integration enables customers to set up SCIM provisioning with any identity provider beyond our officially supported Okta and Google integrations. Admins can now create a private app via the HubSpot CLI to generate the necessary API token and configure SCIM with providers like Microsoft Entra ID, PingFederate, OneLogin, JumpCloud, and others.

Note: this will work as a generic solution and we are also working with Microsoft to get a more streamlined solution built. We don't have a timeline on that one so the Custom SCIM app will work if you're looking for something to use now.

Why does it matter?

Customers using identity providers other than Okta or Google currently cannot utilize SCIM and have to manually provision and de-provision users. This release improves manual user management by automated provisioning for centralized identity management.

How does it work?

• Professional customers can opt into the beta and follow the steps outlined in our documentation here.
• Enterprise customers can enable permission syncing to map IdP roles to HubSpot permission sets.

Who gets it?

Professional Customer Platform, Enterprise Customer Platform, Commerce Hub Professional, Commerce Hub Enterprise, Content Hub Professional, Content Hub Enterprise, Marketing Hub Professional, Marketing Hub Enterprise, Operations Hub Professional, Operations Hub Enterprise, Sales Hub Professional, Sales Hub Enterprise, Service Hub Professional, Service Hub Enterprise

Learn More:

Once opted in, you can access the full documentation.