HubSopt Update: Allowed Login Methods

The Update Algorithm By Sidekick Strategies

HubSpot Security Update: Restricting User Login Methods

This briefing document reviews the new "Allowed Login Methods" feature recently launched by HubSpot, based on the provided product update information and user guide excerpts.

Key Takeaways:

• Enhanced Security: HubSpot now allows Super Admins to specify which login methods users can use. This allows organizations to enforce stronger security measures by mandating specific login types aligned with their security policies.
• Available Login Options: HubSpot offers three primary login options:
• Native HubSpot username and password
• Social logins (e.g., Google, Microsoft, Apple)
• Single Sign-On (SSO) for Enterprise plans
• Granular Control: Admins can enable or disable any combination of these methods. For example, organizations can choose to allow only Google logins, disabling password-based and other social logins.
• User Impact:Users are informed via email about enforced login methods and the effective date.
• At their next login, users are limited to the permitted methods and might be prompted to configure a new login if their existing method is disallowed.

Important Considerations:

• Enforcement Delay: After enabling or modifying allowed login methods, there might be a delay of up to 15 minutes before the changes are enforced.
• Exempt Users: Admins can exempt specific users from the restricted login methods if needed.

Quotes from Sources:

• User Impact: "Users affected by the change will receive an email notification of which login methods are allowed, and the enforcement date associated. The next time they are required to log in, they will be limited to the methods enforced."
• Purpose: "Allows admins to set more stringent login requirements for their users that meet their organization's security needs"

Recommendations:

• Review & Implement: Organizations should review the new "Allowed Login Methods" feature and configure it to align with their specific security policies.
• Communicate Changes: Clear communication with users about the changes to login methods and any required actions from their side is crucial for a smooth transition.