HubSpot SCIM Provisioning via Microsoft Entra ID (Azure AD)

This guide explains step by step how to configure SCIM provisioning between Microsoft Entra ID (Azure AD) and HubSpot using the Joinly (KoppelHet) platform.

With this integration, you fully automate HubSpot user management based on HR or IAM processes in Entra ID.

📋 Prerequisites

Make sure you have access to:

Microsoft Entra ID

• Minimum Application Administrator permissions

• Access to Enterprise Applications

• Provisioning enabled in your tenant

HubSpot

• Super Admin account

• API access enabled

• Active HubSpot subscription with user management

Joinly

• Joinly account (free to create)

🎯 What does this integration do?

With this configuration you can:

✅ Automatically create users in HubSpot
✅ Synchronize users in real time
✅ Automatically assign roles
✅ Deactivate or remove users
✅ Fully automate the identity lifecycle

Step 1 — Create a Joinly Account

1. Go to:

https://platform.joinly.app

2. Click:

Don’t have an account yet? Register here

3. Create your Joinly tenant

4. Log in to the platform

Step 2 — Connect HubSpot via Marketplace

2.1 Open the Integration Page

Go directly to:

https://platform.joinly.app/integrations/marketplace/entra-hubspot

2.2 Start HubSpot Authorization

Click:

Connect HubSpot

You will automatically be redirected to HubSpot OAuth.

2.3 Authorize Joinly in HubSpot

1. Log in with your HubSpot Super Admin account

2. Review the requested permissions

3. Click:

Authorize access

After successful authorization you will be redirected back to Joinly.

✅ HubSpot is now connected
✅ API tokens are managed automatically by Joinly

Step 3 — Configure the Integration in Joinly

3.1 Set Default Role

Inside the HubSpot integration:

Select:

Default HubSpot Role

This role will be assigned to new users when no explicit role mapping is configured.

3.2 Configure Role Mapping (Optional)

You can map Entra ID App Roles to HubSpot roles.

Example:

This allows you to fully control authorization from Entra ID.

3.3 Activate the Integration

Click:

Activate integration

After activation, Joinly automatically generates:

✅ SCIM Endpoint URL
✅ SCIM Secret Token

👉 You will need these values for Entra ID configuration.

Step 4 — Configure SCIM in Microsoft Entra ID

4.1 Create Enterprise Application

1. Go to:

https://entra.microsoft.com

2. Navigate to:

Identity → Applications → Enterprise applications

3. Click:

+ New application
→ Create your own application

4. Enter:

Name: Joinly HubSpot SCIM

5. Select:

Non-gallery application

6. Click:

Create

4.2 Configure Provisioning

1. Open the application

2. Go to:

Provisioning

3. Select:

Automatic

Enter the following:

Tenant URL

➡ Paste the SCIM Endpoint URL from Joinly

Secret Token

➡ Paste the SCIM Secret Token from Joinly

4. Click:

Test Connection

If successful:

✅ HTTP 200 OK

5. Click:

Save

Step 5 — Assign Users & Groups

1. Go to:

Users and groups

2. Click:

Add user/group

3. Add:

• Test user
  OR

• Entra group (recommended)

4. Verify:

➡ Assigned roles match the Joinly role mapping

Step 6 — Configure Provisioning

6.1 Verify Attribute Mapping

Go to:

Provisioning → Mappings

Verify that the following actions are enabled:

✔ Create users
✔ Update users
✔ Disable users

Joinly uses the standard SCIM schema mapping by default.

6.2 Run On-Demand Provisioning Test

1. Go to:

Provision on-demand

2. Select a test user

3. Click:

Provision

Check the logs:

✅ Success
❌ No errors

6.3 Start Provisioning

Return to:

Provisioning

Click:

Start provisioning

⏱ Initial synchronization typically takes 20–40 minutes.

Step 7 — Validation

New User Test

1. Create a new user in Entra ID

2. Assign the user to the Joinly SCIM application

3. Check HubSpot:

✅ Account created
✅ Correct role assigned
✅ Active status

Update Test

Modify in Entra ID for example:

• Name

• Department

• Role

Verify that changes appear in HubSpot.

Deactivation Test

Disable the user in Entra ID.

Verify:

✅ User deactivated in HubSpot
✅ Access revoked

Done ✅

Your HubSpot provisioning is now fully automated through Joinly and Microsoft Entra ID.

HR or IAM is now your single source of truth for HubSpot access management.