Set up SSO: SAML and Okta

Prerequisites

• Admin access to DeepL
• Protocol: SAML 2.0
• Identity provider: Okta
• A SSO domain has been defined in the Single sign-on section of your DeepL admin account. For more information, see this article. 

Set the SSO configuration in Okta

1. Go to your Okta instance and open the Applications section.
2. Click on Create App Integration in the top panel
3. Select SAML 2.0 and click Next.
4. Enter DeepL SSO under Application label.
5. Upload the DeepL icon.
6. Select Do not display application icon to users and Save.

7. Under Sign-in redirect URIs enter

   https://w.deepl.com/auth/realms/prod/broker/ALIAS/endpoint

   (Replace ALIAS with your chosen company SSO domain. The ALIAS value can be found under Company SSO domain in the SSO configuration area in your DeepL account.)

8. Under Audience URI enter

   https://w.deepl.com/auth/realms/prod

9. Set the Name ID format to Persistent
10. Under Attribute Statements enter the following
    
11. Click Next.
12. Confirm that you're using the application as an internal app in the next step and click Finish. 

Get the XML information for the connection

1. In your Okta instance and the application for DeepL access, go to the Sign On tab
2. Click on View SAML setup instructions.

3. Scroll down to the bottom and copy the XML text under Optional and save it as an xml file.

   Use a text editor like Notepad or Visual Studio Code to save the XML file and ensure its validity when uploading it to your DeepL admin account. Do not use a rich text editor like Microsoft Word or TextEdit.

   

    

Set the SSO configuration in DeepL accounts

1. Go to the Settings tab in your DeepL admin account.
   Under Team and Single sign-on the SSO domain has the status Domain name approved.
2. Click Set up SSO next to Single sign-on.
   In the Set up SSO form select SAML as the Authentication type
3. Select Import from file and upload the xml file you've saved from your Okta SAML configuration
4. Set NameID policy format to Persistent

5. Enter the following 

   • Assertion attribute: First name = firstName
   • Assertion attribute: Last name = lastName
   • Assertion attribute: Email address = email

   

    

Create a bookmark for your app

1. Open the Applications section and click on Browse App Catalog.
2. Search for Bookmark App and add the app.
3. Click on Add Integration.
4. Add the following information.
   • Application label: DeepL SSO

   • URL: https://ALIAS.sso.deepl.com
     (Replace ALIAS with your chosen company SSO domain. The ALIAS value can be found under Company SSO domain in the SSO configuration area in your DeepL account.) 

     

If you only setting up SSO, test the configuration with a test user and activate SSO in your DeepL admin account.