Configure HubSpot user provisioning

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click HubSpot.
4. For Autoprovisioning, click Configure autoprovisioning.
5. Click Authorize.
6. If prompted, sign in to your HubSpot administrator account.
7. For App attributes, verify that all mandatory attributes—those marked with an asterisk (*)—are mapped to Google directory attributes. If not, click the Down arrow  and map them to the appropriate attribute.
8. (Optional) To map the roles attribute to a custom attribute, you must complete the following steps:
   1. Create permission sets in HubSpot. For the steps, go to Create and edit permission sets.
   2. In HubSpot, assign permissions to a user if their role in Google matches the name of the HubSpot permission set:
      1. Go to your HubSpot account.
      2. Click SettingsIntegrationsConnected Apps.
      3. Click Google SCIM.
      4. For Permission management, turn on Give Google access to assign permission sets to users.
9. Click Continue.
10. (Optional) To limit autoprovisioning to specific groups of users:
    1. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.
    2. Add any additional groups.
    3. (Optional) To remove a group, click Remove .
11. Click Continue.
12. Decide how long users have access to the app after the app is turned off for them or their Google Workspace account is suspended or deleted. You can suspend their account in HubSpot. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days. 
    1. Choose options for each of these settings, as needed:
       • When an app is turned off for a user
       • When a user is suspended from Google
       • When a user is deleted from Google
    2. Click Finish.
13. Update your DNS records to verify your domain in HubSpot:
    1. In your HubSpot account, click SettingsIntegrations Connected Apps.
    2. Click Google SCIM.
    3. For Domain, enter your users’ email sending domain.
    4. Click Save.
    5. Click Verify it nowNext.
    6. Copy and save the value in the Value column. You need this value when you create a new TXT record in your DNS provider.
    7. Sign in to your DNS provider account and create a new TXT record for the domain that you’re verifying.
    8. In the Value/Points To/Target field, paste the value copied from HubSpot.
    9. After you create the TXT record, go back to HubSpot and click Next.

       After the DNS changes propagate, the domain is verified.

14. Turn on Autoprovisioning.
15. Click Turn on to confirm.

If you turned on the HubSpot app for certain organizational units, only users in the added groups who are also members of those organizational units are subject to autoprovisioning.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click HubSpot.
4. Click Autoprovisioning.
5. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.
6. Add any additional groups.
7. (Optional) To remove a group, click Remove .

   If a group has users from a secondary domain or from outside of your organization, those users are not provisioned.

8. Click Update.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click HubSpot.
4. Click Autoprovisioning.
5. For Deprovisioning, click Edit.
6. Decide how long users have access to the app after the app is turned off for them, or their Google Workspace account is suspended or deleted. You can suspend their account in HubSpot. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days. 
   1. Choose options for each of these settings, as needed:
      • When an app is turned off for a user
      • When a user is suspended from Google
      • When a user is deleted from Google
7. Click Update.

You must be signed in as a super administrator for this task.

To turn off autoprovisioning for the app and keep the configuration information:

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click HubSpot.
4. Choose an option:
   • Turn off Autoprovisioning.
   •  Click AutoprovisioningStatusTurn off
5. Click Turn off to confirm.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click HubSpot.
4. Click Autoprovisioning.
5. For Delete configuration, click Delete.
6. Click Delete to turn off autoprovisioning and remove all the configuration information.
   Existing users will not be removed from HubSpot and can still use the app.