{"id":2081,"date":"2025-12-17T07:39:01","date_gmt":"2025-12-17T08:39:01","guid":{"rendered":"http:\/\/gogetmuscle.com\/?p=2081"},"modified":"2025-12-17T17:44:58","modified_gmt":"2025-12-17T17:44:58","slug":"synchronizing-hubspot-roles-with-microsoft-entra-id-via-scim-without-group-synchronization","status":"publish","type":"post","link":"http:\/\/gogetmuscle.com\/index.php\/2025\/12\/17\/synchronizing-hubspot-roles-with-microsoft-entra-id-via-scim-without-group-synchronization\/","title":{"rendered":"Synchronizing HubSpot Roles with Microsoft Entra ID via SCIM Without Group Synchronization"},"content":{"rendered":"<p><P>Hello Community,<\/P><P>\u00a0<\/P><P>We are currently working on a <STRONG>custom SCIM integration<\/STRONG> between <STRONG>Microsoft Entra ID<\/STRONG> and <STRONG>HubSpot<\/STRONG>, and we would like to clarify a limitation we are facing regarding the management of HubSpot roles (permission sets).<\/P><P>\u00a0<\/P><P>Our target setup would be:<\/P><UL><LI><P>to manage roles on the <STRONG>Microsoft Entra ID<\/STRONG> side, ideally using <STRONG>groups<\/STRONG>;<\/P><\/LI><LI><P>to <STRONG>disable group synchronization<\/STRONG> to HubSpot in order to avoid technical limitations and quarantine issues on the Entra ID side;<\/P><\/LI><LI><P>while still allowing HubSpot to automatically receive user role assignments via <STRONG>SCIM<\/STRONG>.<\/P><\/LI><\/UL><P>Based on our current understanding, disabling group synchronization prevents any information from being sent to HubSpot that would allow automatic role assignment, which seems to block this scenario.<\/P><P>However, HubSpot\u2019s documentation for <STRONG>custom SCIM applications<\/STRONG> explicitly mentions the ability to synchronize roles using the roleSyncEnabled parameter, allowing identity provider roles to be mapped to HubSpot permission sets, provided that the role names match exactly.<\/P><P>In this context, we would like to know:<\/P><UL><LI><P>Is it possible to use role synchronization (roleSyncEnabled) with <STRONG>Microsoft Entra ID<\/STRONG> <STRONG>without<\/STRONG> enabling group synchronization?<\/P><\/LI><LI><P>Or is this approach currently not supported, with no officially supported solution outside of HubSpot\u2019s dedicated SCIM connectors?<\/P><\/LI><\/UL><P>If anyone in the community has already faced this situation or implemented an alternative solution, your feedback would be greatly appreciated.<\/P><P>\u00a0<\/P><P>Thank you in advance for your clarification.<\/P><P><span class=\"lia-inline-image-display-wrapper lia-image-align-inline\" style=\"width: 999px\"><img src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" role=\"button\" title=\"Capture d\u2019e\u0301cran 2025-12-16 a\u0300 10.39.23.png\" alt=\"Capture d\u2019e\u0301cran 2025-12-16 a\u0300 10.39.23.png\" class=\"lazyload\" data-src=\"http:\/\/gogetmuscle.com\/wp-content\/uploads\/2025\/12\/large-4\"><\/span><\/P><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello Community,\u00a0We are currently working on a custom SCIM integration between Microsoft Entra ID and HubSpot, and we would like to clarify a limitation we are facing regarding the management of HubSpot roles (permission sets).\u00a0Our target setup would be:to manage roles on the Microsoft Entra ID side, ideally using groups;to disable group synchronization to HubSpot [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2083,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[14],"tags":[],"_links":{"self":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts\/2081"}],"collection":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/comments?post=2081"}],"version-history":[{"count":2,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts\/2081\/revisions"}],"predecessor-version":[{"id":2084,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts\/2081\/revisions\/2084"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/media\/2083"}],"wp:attachment":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/media?parent=2081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/categories?post=2081"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/tags?post=2081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}