Skip to content
English
  • There are no suggestions because the search field is empty.

Setting Up Single Sign-On (SSO) for LMS or Courses

Single sign-on (SSO) allows your team and clients to access private content on your HubSpot-hosted pages without needing a separate username and password for each application.

This article will guide you through setting up SSO for your private content, such as pages within HubLMS, Rocket PRM, or Cohortium. Here's the technical link for HubSpot's Documentation

Before You Begin

  • Product Requirement: This feature is available for HubSpot Content Hub Professional and Enterprise users.

  • One Authentication Method Per Domain: You can only use one authentication method (either HubSpot's default membership or SSO) per subdomain. If you set up SSO on a specific subdomain, you will be limited to that SSO provider for all private content on that subdomain.

Setting Up SSO in HubSpot

  1. Navigate to Private Content Settings: In your HubSpot portal, go to your private content settings. Here, you will find the specific Domain needed for your SSO configuration based on the domain you've set up.

  2. Configure Your Identity Provider: In your identity provider (e.g., Google Apps, Okta, Azure AD), you will need to input the following information, which you can copy from your HubSpot private content settings:image_720

    • Audience URL

    • Sign on URL

  3. Configure HubSpot: In your HubSpot private content settings, you will need to paste the following information from your identity provider:

    • Issuer URL

    • Single Sign-On URL

    • Certificate

  4. Verify the Connection: Once you have entered the required information, click Verify. The system will test the connection to your SSO provider. A success message will appear when the connection is established.

Controlling Access to Your Private Content

Once SSO is enabled for a domain, you can control access to individual pages. In the "Settings" tab of a page editor, under "Control audience access," you will see the following options:

screenshot_2025-08-20_at_3.18.15___pm

  • Public: The page is accessible to everyone (default).

  • Password required: All visitors use the same shared password to access the page. This is best for temporary access.

  • Access group membership required: This option is for HubSpot's default membership functionality and is used when SSO is not enabled for the domain.

  • Single sign-on (SSO) required: Any user authenticated through your SSO provider can access the page.

  • Single sign-on (SSO) and Access group membership required: This is the most commonly used option. It requires users to be authenticated through your SSO provider and be a member of a specific access group in HubSpot. This allows you to grant access to specific content based on criteria you set within HubSpot, such as customer level or team membership.

HubSpot allows for numerous access groups, giving you granular control over who can see what content.

Need Help?

Setting up SSO can be a technical process. If you need assistance, we are happy to help you with the HubSpot side of the configuration during your onboarding and training. For the SSO provider-side setup, we recommend consulting with your IT department or provider. We can also discuss additional support options if needed.