miniOrange Hubspot 2FA

This product adds two-factor authentication (2FA) and single sign-on (SSO) to HubSpot accounts. It requires users to complete a second verification step, such as OTP over SMS, push notification, YubiKey, TOTP, or Google Authenticator, after entering their username and password before granting access to HubSpot. The solution is configured through the miniOrange Admin Console, where HubSpot is set up as a SAML/WS-Fed application. Once SAML SSO is established between miniOrange and HubSpot, administrators can enable 2FA policies on top of the existing login flow, including options for adaptive authentication that can adjust authentication requirements based on context. miniOrange supports connecting to external directories and identity providers, including Active Directory, ADFS, OpenLDAP, AWS, Microsoft Entra ID, and Okta, allowing organizations to manage HubSpot access using existing user stores. It also supports authenticator apps such as the miniOrange Authenticator, Google Authenticator, Microsoft Authenticator, and Authy for generating time-based one-time passwords. The tool is intended for administrators who want to add an additional authentication layer to HubSpot logins to reduce the risk of unauthorized account access resulting from compromised credentials.