How Hubbl added enterprise SSO without refactoring

Hubbl is a Denmark-based platform built to spark meaningful connections among colleagues, both during and beyond work hours. Whether it’s walk-and-talks or spontaneous chats, Hubbl fosters real connections at workplace among colleagues.

As momentum grew, so did attention from larger organizations with more sophisticated IT and compliance expectations. To serve these enterprise customers, Hubbl needed secure, scalable identity management. Single Sign-on was non-negotiable and many prospects specifically asked for integrations with identity providers like Microsoft Entra ID.

There was just one catch. Hubbl was using Firebase for auth. Building SSO inhouse would derail months of momentum.

The challenge? Find an SSO solution that could integrate seamlessly with their existing Firebase architecture, without the development overhead.

The solution Hubbl was chasing

The team evaluated solutions like Auth0, WorkOS, and FusionAuth but found them too heavy for their lightweight architecture needs, with some lacking Firebase support. Scalekit stood out right away with simplified configuration and clearly documented Firebase integration.

With Scalekit’s OpenID Connect support, the team was able to add enterprise SSO as a provider inside Firebase . No hacks, no hidden complexity. Thanks to crisp developer guides, Hubbl had Entra ID up and running in just a few days, fully tested and ready to roll.

“Our customers needed Hubbl to offer enterprise SSO, but our stack was already locked in. Scalekit let us extend our offering without dismantling what we had built.The integration was fast, easy, and exactly what we needed.”
— Emil, Founder, Hubbl

In the live setup, Scalekit acts as an OpenID Connect (OIDC) provider to Firebase. When a user signs in, authentication flows through Scalekit to the customer’s identity provider, and the user is routed back into the app, fully authenticated.

Scalekit also supports IdP-initiated SSO, allowing users to log in directly from their company portals without additional configuration. This makes Hubbl directly discoverable within enterprise identity providers for customers who prefer that flow.

The team also tapped into custom attribute mapping, which let them pull in key fields like department, job title, and office location. This opened the door to personalized user experiences and made sure identity data stayed aligned with enterprise policies.

Another big win was the admin portal, which gave Hubbl’s customers full control to set up and manage their own SSO configurations. It cut out the back-and-forth repetitive configurations and freed up Hubbl’s developers to focus on building product, not handling support tickets.

And while flexibility mattered, so did trust. Scalekit checked the right boxes on compliance too, with full GDPR alignment and a transparent Trust Center that gave customers the confidence they needed to move forward.

Results with Scalekit

“It's the most simple and easily understandable platform we could find for implementing enterprise SSO in our service. It's free to get started and they have the best customer support I have experienced when compared to some of their major competitors.”
— Emil, Founder, Hubbl

With Scalekit, Hubbl was able to:

✅ Closed enterprise deals that were earlier blocked with SSO
✅ Integrated SSO without changing their Firebase auth
✅ Enabled enterprise features like IdP-initiated SSO and custom user attributes
✅ Empowered customers to self-configure SSO via a self-serve admin portal

Why Scalekit?

• Developer-first SDKs: Built for modern stacks with tailored Firebase documentation
• Enterprise-grade compliance: GDPR-ready with transparent security practices
• Built to scale: One integration supports social login, SSO, and future growth
• Cost-effective: A high-value alternative to complex, expensive legacy providers

The bottom line

For Hubbl, going upmarket meant meeting enterprise expectations without losing product momentum. Scalekit helped them do just that. In a matter of days, they turned an enterprise SSO requirement into a launch-ready feature—with no rewrites, no delays, and no compromise.

"We didn’t want to build auth. Scalekit gave us a production-ready setup with minimal dev effort and the flexibility to scale as we grow."
— Emil, Founder, Hubbl

‍

Want to add enterprise SSO without rewriting your auth stack? Sign up for a Free account with Scalekit and integrate IdP support on top of your existing auth (like Firebase) with minimal effort. Questions about attribute mapping or SSO flows? Book time with our auth experts.

FAQs

Can Scalekit integrate SSO without replacing existing Firebase auth?

Scalekit is designed to function as an OIDC provider that sits on top of your current authentication layer such as Firebase. This architectural approach allows engineering teams to add enterprise SSO capabilities like SAML or OIDC without undergoing a complete system refactor. By configuring Scalekit as a trusted identity provider within your existing stack, you preserve your user database and core logic while delegating complex enterprise federation tasks. This methodology ensures a faster time to market and minimizes the technical debt often associated with migrating entire identity management systems for enterprise compliance.

How does the admin portal simplify enterprise customer onboarding?

The Scalekit admin portal provides a self service interface that allows your enterprise customers to configure their own Single Sign On settings independently. Instead of requiring your developers to manually exchange metadata or certificates with customer IT teams, the portal guides administrators through the setup process for providers like Microsoft Entra ID. This shift significantly reduces support overhead and accelerates the onboarding timeline for new enterprise accounts. By empowering customers to manage their own configurations, your team remains focused on core product development rather than handling repetitive and manual identity integration tasks.

Can custom user attributes be synchronized during the SSO flow?

Yes, Scalekit supports advanced custom attribute mapping, which enables the extraction of specific data fields from the enterprise identity provider during authentication. Organizations can pull relevant metadata such as department, job title, or office location directly into their application. This data synchronization is crucial for personalized user experiences and ensuring that internal authorization policies remain aligned with the source of truth in the corporate directory. By mapping these attributes automatically, you eliminate manual data entry and ensure that user profiles stay up to date with every login event across the enterprise.

Does Scalekit support identity provider initiated login flows?

Scalekit fully supports identity provider initiated SSO, allowing users to launch your application directly from their corporate portals like Okta or Microsoft Entra ID. This capability enhances the user experience by providing a seamless transition from the enterprise dashboard to your service without requiring a secondary login prompt. For many large organizations, this is a standard requirement for discoverability and security compliance. Scalekit handles the complex redirection and token exchange logic, ensuring that your application receives a valid authentication token regardless of whether the login started at the application or the provider.

How does Scalekit ensure compliance for enterprise data security?

Scalekit maintains a robust security posture designed to meet the rigorous demands of enterprise CISOs and IT departments. The platform is fully GDPR compliant and offers a transparent Trust Center to provide visibility into security practices and certifications. By centralizing authentication through a platform built for B2B requirements, you can offer your customers the assurance they need regarding data sovereignty and secure identity handling. This commitment to transparency and compliance helps remove friction during the procurement process, allowing your sales team to close enterprise deals faster with confidence in the underlying architecture.

What is the typical development effort for adding SSO?

Implementing enterprise SSO with Scalekit typically takes only a few days of development effort, as demonstrated by the Hubbl integration. Because Scalekit provides developer first SDKs and comprehensive documentation tailored for modern stacks, engineering teams can avoid the months of work required to build SAML and OIDC support from scratch. The platform abstracts away the nuances of various identity providers, offering a unified API that simplifies the integration. This efficiency allows organizations to meet urgent customer demands for SSO without derailing their product roadmap or committing significant engineering resources to auth maintenance.

Can Scalekit manage authentication for AI agents and M2M?

Beyond standard user login, Scalekit is architected to handle complex machine to machine and agent authentication scenarios including A2A flows. As B2B applications evolve to include AI agents and automated services, managing these identities requires secure token exchange and Dynamic Client Registration or DCR. Scalekit facilitates these flows by providing robust support for Client Credentials and other machine to machine patterns. This ensures that your AI agents can securely interact with protected resources while maintaining a clear audit trail. This future proof architecture allows you to scale from simple user authentication to sophisticated agentic workflows.

Why is Scalekit considered a lightweight alternative to legacy providers?

Many legacy authentication providers offer heavy, complex architectures that require significant refactoring of your existing codebase to implement. Scalekit differs by focusing on a developer centric, modular approach that integrates seamlessly with your current stack, such as Firebase or custom auth systems. Our platform minimizes the complexity and cost associated with enterprise features, providing only the necessary tools without the bloat. This makes it an ideal choice for teams building modern AI apps or MCP servers that need to scale quickly and maintain architectural flexibility without being locked into a proprietary ecosystem.

How does Scalekit support growth from startups to enterprise?

Scalekit is designed to grow alongside your business, from your first enterprise deal to managing thousands of corporate connections. The platform supports a wide range of authentication methods, including social logins and various enterprise identity providers, through a single integration. This scalability ensures that as your customer base expands and their requirements become more complex, your authentication infrastructure remains stable and capable. With features like the self service admin portal and automated attribute mapping, Scalekit handles the operational burden of identity management, allowing your team to focus on scaling your core product and business operations.