---
title: Hubspot · Cloudflare Zero Trust docs
description: This guide covers how to configure Hubspot as a SAML application in
  Cloudflare Zero Trust.
lastUpdated: 2025-08-19T18:37:36.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/saas-apps/hubspot-saas/
  md: https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/saas-apps/hubspot-saas/index.md
---

This guide covers how to configure [Hubspot](https://knowledge.hubspot.com/account-security/set-up-single-sign-on-sso) as a SAML application in Cloudflare Zero Trust.

## Prerequisites

* An [identity provider](https://developers.cloudflare.com/cloudflare-one/identity/idp-integration/) configured in Cloudflare Zero Trust
* Admin access to a Hubspot Enterprise plan account

## 1. Configure Hubspot

1. Go to **Settings** > **Account**, then go to **Defaults** > **Security**.
2. Select *Single Sign-on*.
3. Copy the values for *Audience URI* and *Sign on URL*.

## 2. Configure Cloudflare Access

1. In Zero Trust, go to **Access** > **Applications** and create a SaaS application.

2. Set the **Application type** to *Hubspot*.

3. Use the following Hubspot field mappings:

   | Hubspot values | Cloudflare values |
   | - | - |
   | Audience URI | Entity ID |
   | Sign On URL | Assertion Consumer Service URL |

4. Set **NameID** to *Email*.

5. Add any desired [Access policies](https://developers.cloudflare.com/cloudflare-one/policies/access/) to your application.

6. Copy the **SSO endpoint** and **Access Entity ID**.

7. Save the application.

## 3. Create a x.509 certificate

1. Paste the **Public key** in a text editor.
2. Wrap the certificate in `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----`.

## 4. Finalize Hubspot configuration

1. Use the following field mappings:

   | Cloudflare value | Hubspot value |
   | - | - |
   | SSO endpoint | Identity Provider Single Sign-on URL |
   | Entity ID | Identity Provider Identifier |
   | Public key | Certificate |

2. Select **Verify** to validate the integration.

Your configuration is now complete. Hubspot SSO can be switched on for specific users or the entire account.
