SCIM (System for Cross-domain Identity Management) is an open standard that simplifies and automates user and group management in your DeepL account and works in combination with SSO. For more information on SSO, see this article. With SCIM, you can automatically create, update, and manage your team members in your DeepL account from an identity provider (IdP) with the following benefits:
- Save time by eliminating manual user management
- Ensure that your user list is always synchronized with your identity provider's list
- Improve security by automatically disabling access for users who leave the company or lose eligibility for your DeepL account.
- Enable group-based license and product assignments aligned with your internal structure.
User provisioning with SCIM is available for the subscriptions listed above with 50 users or more, and allows IT admins to do the following:
- Automatically create (provision) user accounts in DeepL
- Assign users to specific product groups, such as Translator, Write, or Voice
- Automatically remove or disable user accounts when they leave the company or lose access rights
- Synchronize changes in product group assignments or user attributes from your identity provider to DeepL
User management
Users are managed as follows between the DeepL application set up in your identity provider and your DeepL account:
- When you assign a user to the DeepL application set up in your identity provider, a DeepL team member account and, if the group doesn't already exist, a user group is created
- When you assign a user to a different group with the DeepL application in your identity provider, the user's group membership is updated
- If you remove a user from the DeepL application or disable them in your identity provider, they will remain in the team and will be visible under the Users tab with the status License unassigned
- If you delete a user from the directory of your identity provider, their DeepL team member account is deleted
For more information on how operations taken in the identity provider are reflected in DeepL, see this article.
Once you reach the limit of team members in your plan, additional team members will not be able to use DeepL via your paid plan.
Depending on your settings in your DeepL admin account, users can still log in via SSO and use the free version of DeepL. For more information, see this article. If you disable the free version of DeepL for logged-in users and exceed the number of licenses in your plan, users won't be able to use DeepL while logged in.
You can free up licenses for users who haven't used DeepL or purchase more licenses. For more information on identifying these users, see this article.
Setup
We currently provide detailed setup instructions for the following identity providers:
- Entra ID
- Further identity provider will soon follow
If you have a previous setup with JIT group synchronization, follow the instructions in this article.