Hootsuite

The Corma and Hootsuite integration brings your Hootsuite organization under Corma's identity governance, so marketing and IT teams know who can publish, reply or change settings on the company's social accounts, and can close that access the day someone leaves. Hootsuite is a social media management platform that teams use to schedule posts, answer messages and report on performance across several networks from one place.

Key takeaways

• Hootsuite plans are sold per user, so every member who no longer publishes still takes a seat at renewal.
• Hootsuite separates organization permissions, such as Super Admin, from permissions on each social account, such as Editor or Limited.
• Corma reviews both permission levels in Hootsuite and removes departing members, after any organization ownership has been transferred.

Who can speak for your brand in Hootsuite?

Hootsuite access works on two levels. Organization permissions (Super Admin, Admin and View only, or Default on the Business plan) decide who manages members and settings. Social account permissions, from Advanced and Unlimited down to Editor, Responder or Limited, decide what each member can do on each connected profile. On the Advanced, Business and Enterprise plans, posts from Limited and Responder members wait for approval before going out.

The exposure is concrete: an agency that ran last year's campaign, an intern with Editor rights, a former community manager still listed as a member. Each of them can still publish in the brand's name. Removal cuts a member off from the organization, but someone has to do it, and an organization owner must transfer ownership before they can be removed.

How Corma governs Hootsuite

• Members and permissions in one view: every Hootsuite member, with organization and social account permissions, next to the rest of your stack.
• Offboarding tied to HR: a departure recorded in your HR system removes the member from Hootsuite in the same workflow as email and CRM, as part of automated offboarding.
• Time-boxed access for agencies: external members ask for access through self-serve access requests, approved by the right manager and removed when the mission ends.
• Reviews of Super Admins: Super Admins and members with broad social account permissions go into access review campaigns.

For seats and spend, see Hootsuite licence management and Hootsuite cost management. Access automation is detailed on the Hootsuite access management page.

Frequently asked questions

How does Corma connect to Hootsuite?

Through a native API integration where Hootsuite allows it, or through Corma's browser-based agents, which work in the Hootsuite admin settings the way an administrator would.

Does Corma replace Hootsuite single sign-on?

No. Hootsuite offers SAML single sign-on on its Enterprise plan, set up by a Super Admin. SSO decides how members log in, while Corma decides whether each member, and each permission, should still exist.

Where is Corma data hosted?

In France, on AWS infrastructure, with encryption in transit and at rest. Corma is ISO/IEC 27001:2022 certified and only requests the permissions it needs to manage access.

Who can still post for your brand today? Book a Corma demo to find out.