> ## Documentation Index > Fetch the complete documentation index at: https://docs.stackone.com/llms.txt > Use this file to discover all available pages before exploring further. # HubSpot OAuth 2.0 connector profile – StackOne setup guide > Set up the OAuth 2.0 connector profile for HubSpot in StackOne. One-time admin setup required before your users can link HubSpot accounts via Hub. Ensure you have Admin privileges for your HubSpot account to create and configure OAuth applications.
Select Actions to adjust the guide
Some actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.
Action
Scope(s)
Loading actions...
Dynamic Guide URL
Scopes Selected

          

            
Separator

Create a HubSpot OAuth application

Create a public app in the HubSpot developer portal to enable OAuth authentication.

Sign in to your HubSpot account.

  • Click on the account menu in the top right and select Development.
  • Click Legacy Apps in the left sidebar.

Click Create app in the upper right corner and select Public app.

  • Enter an application name (e.g., "StackOne Integration")
  • Click Create app.

Navigate to the Auth tab in your application settings.

  • In the Redirect URL field, enter: `https://api.stackone.com/connect/oauth2/hubspot/callback`
  • Click Save.

Copy your Client ID and Client Secret from the Auth tab.

  • Copy the Client ID value.
  • Click Show next to Client Secret to reveal it, then copy.
  • Store both securely for use later.

In the Auth tab, scroll to the Scopes section. HubSpot supports required and optional scopes — at runtime, optional scopes are automatically dropped if the connecting user's account lacks access. Importantly, every scope listed in the install URL must first be registered on this Scopes page; HubSpot will reject the install (and the account connection will fail) if the URL references a scope you have not added here. See HubSpot scopes documentation for details.

  • Mark only `oauth` as Required (minimum required scope).
  • Mark all the following scopes as Optional to support different user permission levels.
  • Required to connect successfully — every scope you intend to request must be added here as either Required or Optional. Omitting a scope from this page while still requesting it during connection will cause the OAuth install to fail.
Enables actions: Add Asset To Campaign, Batch Create Associations, Batch Create Companies, Batch Create Contacts, Batch Create Deals, Batch Read Associations, Batch Update Companies, Batch Update Contacts, Batch Update Deals, Clone Marketing Email, Create Association, Create CRM Object, Create Campaign, Create Company, Create Contact, Create Custom Object Association, Create Custom Object Schema, Create Deal, Create Deal Pipeline, Create Deal Pipeline Stage, Create Marketing Email, Create Ticket, Delete Association, Delete CRM Object, Delete Campaign, Delete Company, Delete Contact, Delete Custom Object Association, Delete Custom Object Schema, Delete Deal, Delete Marketing Email, Delete Ticket, Get CRM Object, Get Campaign, Get Company, Get Contact, Get Custom Object Schema, Get Deal, Get Deal Pipeline, Get Deal Pipeline Stage, Get Form, Get Marketing Email, Get Object Properties, Get Owner, Get Ticket, Get Ticket Pipeline, Get Ticket Pipeline Stage, Get Unified Group, Get Unified Role, Get Unified User, List Associations, List CRM Objects, List Campaign Assets, List Campaigns, List Companies, List Contacts, List Custom Object Schemas, List Deal Pipeline Stages, List Deal Pipelines, List Deals, List Form Submissions, List Forms, List Marketing Emails, List Owners, List Ticket Pipeline Stages, List Ticket Pipelines, List Tickets, List Unified Groups, List Unified Roles, List Unified Users, Publish Marketing Email, Remove Asset From Campaign, Search Companies, Search Contacts, Search Deals, Search Tickets, Update CRM Object, Update Campaign, Update Company, Update Contact, Update Custom Object Schema, Update Deal, Update Deal Pipeline, Update Deal Pipeline Stage, Update Marketing Email, Update Ticket

Add every scope below as Optional in your HubSpot app. If you register only a subset, you must list the same subset in the StackOne Auth Config's Optional Scopes field (Step "Create the StackOne Auth Config" below) — otherwise the connection will fail because the install URL will reference scopes that aren't registered in the app.

Click Update after configuring all scopes to save your changes. Without this save step, the scopes are not persisted on the app and any connection attempt will fail with an OAuth scope error.
## Creating the StackOne Connector Profile To create the Connector Profile in StackOne for HubSpot: Login to StackOne and navigate to [Connector Profiles](https://app.stackone.com/connector_profiles)
  • Click + Connector Profile
  • Search for and select HubSpot
  • Select Type as OAuth 2.0
  • Fill out the fields using details retrieved from your provider:
    • Client ID
    • Client Secret
    • Required Scopes (Optional)
    • Optional Scopes (Optional)
  • (Optional) Select Actions to be enabled for this Connector Profile
  • Click Create profile
 Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for HubSpot.