DeepL SSO Azure Entra OpenID
DeepL SSO Azure Entra OpenID
com
Requirements
• You have an Azure AD set up
• You have administrative permissions to create an app within the Azure AD tenant
• A company domain has been defined for the DeepL environment. For further
information please check our Help Center article.
2) Register app
1. Select App registrations in the left-hand menu
2. Click New registrations on the top panel
3) Configure initial settings
1. Under Name enter DeepL SSO
2. Under Supported account types keep the default settings as Accounts in this
organizational directory only. Select Other if you require special setting.
3. Under Redirect URI, select Web and enter
https://w.deepl.com/auth/realms/prod/broker/ALIAS/endpoint
(Replace ALIAS with your chosen company DOMAIN)
4. Click Register
4. Copy the secret value to a safe place. You will need it later in the DeepL set up.
5) Set up permissions
1. Select API permissions in the left-hand panel
2. On the center panel there should already be a default permission entitled User.Read
below Microsoft Graph. If not, insert it manually.
3. Click Add a permission in the center panel. Select Microsoft Graph, then select
Delegated permissions.
4. Check the box for email, then click Add permissions
6) Collect endpoints
1. Select Overview in the left left-hand panel
2. Copy the Application (client) ID text, which you will provide to DeepL in the next step
3. Select Endpoints from the top menu bar. Copy the URL of the OpenID Connect
metadata document from the list of endpoints. You will also provide it to DeepL.
7) Provide data
Provide the following data in your DeepL Account settings:
| www.deepl.com