| www.deepl.
com
Setup guide for DeepL Single Sign-on (SSO)
Azure AD (Microsoft Entra ID) - OpenID
Requirements
• You have an Azure AD set up
• You have administrative permissions to create an app within the Azure AD tenant
• A company domain has been defined for the DeepL environment. For further
information please check our Help Center article.
1) Open Azure AD management
• Open https://portal.azure.com and select Azure AD. The direct link is
https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Over
view
2) Register app
1. Select App registrations in the left-hand menu
2. Click New registrations on the top panel
3) Configure initial settings
1. Under Name enter DeepL SSO
2. Under Supported account types keep the default settings as Accounts in this
organizational directory only. Select Other if you require special setting.
3. Under Redirect URI, select Web and enter
https://w.deepl.com/auth/realms/prod/broker/ALIAS/endpoint
(Replace ALIAS with your chosen company DOMAIN)
4. Click Register
4) Create Client Secret
1. Select Certificates & Secrets in the left-hand panel. Then, on the center panel below
Client secrets, click on New client secret.
2. Name the new client secret DeepL SSO, and select a proper expiration date. You will
not be automatically notified when this client secret expires, so you will need to
monitor this on your own.
3. Click Add
4. Copy the secret value to a safe place. You will need it later in the DeepL set up.
5) Set up permissions
1. Select API permissions in the left-hand panel
2. On the center panel there should already be a default permission entitled User.Read
below Microsoft Graph. If not, insert it manually.
3. Click Add a permission in the center panel. Select Microsoft Graph, then select
Delegated permissions.
4. Check the box for email, then click Add permissions
6) Collect endpoints
1. Select Overview in the left left-hand panel
2. Copy the Application (client) ID text, which you will provide to DeepL in the next step
3. Select Endpoints from the top menu bar. Copy the URL of the OpenID Connect
metadata document from the list of endpoints. You will also provide it to DeepL.
7) Provide data
Provide the following data in your DeepL Account settings:
• OpenID Connect metadata Document
• Application (Client) ID
• Client Secret
| www.deepl.com