Set up SSO: OpenID Connect and Okta

Prerequisites

• Admin access to DeepL
• Protocol: OpenID Connect
• Identity provider: Okta
• A SSO domain has been defined in the Single sign-on section of your DeepL admin account. For more information, see this article. 

Set the SSO configuration in Okta

1. Go to your Okta instance and open the Applications section
2. Click on Create App Integration in the top panel
3. Select OIDC - OpenID Connect and Web Application and click Next.
4. Enter DeepL SSO under App integration name.
5. Upload the DeepL icon and Save.

6. Under Sign-in redirect URIs enter

   https://w.deepl.com/auth/realms/prod/broker/ALIAS/endpoint

   (Replace ALIAS with your chosen company SSO domain. The ALIAS value can be found under Company SSO domain in the SSO configuration area in your DeepL account.)

7. Skip group assignment for now: If groups haven’t been set up yet you can select this option to do the assignment later.
    
8. Click Save

Set the SSO configuration in DeepL accounts

1. Go to the Settings tab in your DeepL admin account.
   Under Team and Single sign-on the SSO domain has the status Domain name approved.

2. Click Set up SSO next to Single sign-on.
   In the Set up SSO form select OpenID Connect as the Authentication type and enter the following information from Okta.

   • OpenID Connect metadata endpoint:

     https://YOUR_OKTA_DOMAIN.okta.com/.well-known/openid-configuration

     (Replace YOUR_OKTA_DOMAIN with your Okta instance.)

   • Client ID
   • Client Secret

   

3. Activate SSO.

Create a bookmark for your app

1. Open the Applications section and click on Browse App Catalog.
2. Search for Bookmark App and add the app.
3. Click on Add Integration.
4. Add the following information.
   • Application label: DeepL SSO

   • URL: https://ALIAS.sso.deepl.com
     (Replace ALIAS with your chosen company SSO domain. The ALIAS value can be found under Company SSO domain in the SSO configuration area in your DeepL account.) 

     

If you only setting up SSO, test the configuration with a test user and activate SSO in your DeepL admin account.