Set up SSO with QuickLaunch

Requirements
- QuickLaunch account with access to the Tenant Administration Console
- Grammarly Business, Grammarly Pro, or a Grammarly for Education account with the admin role or a designated custom role

1. Log in to your QuickLaunch Tenant Administration Console.
2. Hover over the Apps section and choose Create New App.
3. On the next page, fill in the application name and proceed with configuring it:
   1. Under the Choose application type section, choose SAML.
   2. In the Application URL field, enter https://sso.grammarly.com/saml/assertion
   3. Display Order (Optional): The order of precedence in which the Grammarly app will be displayed.
   4. Permissible Groups (Optional): Restricts the Grammarly app to the relevant AD groups.
   5. Click Save & Configure in the upper-right corner.
4. Next, scroll down to the Claim configuration section, click Add Claim URI, and configure the following SAML attributes (name and value):
   • EmailAddress
   • FirstName
   • LastName
5. (Optional) If you need to configure additional attributes, please follow these steps:
   1. Hover over the Settings section at the top, choose Advanced, and click Claim Configuration.
   2. In the upper-right corner, click Add Local Claim.
   3. Enter the claim details and make sure the value in the Mapped attribute field matches the AD attribute name.
   4. Check the boxes next to Supported by default and Read-only.
      
   5. Click Save and go back to the app configuration page.
6. Scroll down to the Inbound authentication configuration section and enter the following values:
   1. In the Enter assertion Url field, enter https://sso.grammarly.com/saml/assertion
   2. In the Issuer field, enter https://sso.grammarly.com/saml/metadata
   3. In the Name ID format field, enter urn:oasis:names:tc:SAML:1:1:nameid-format:unspecified
   4. In the Service Provider Name field, enter Grammarly.
   5. Click Save.
7. Go back to the app configuration page and download the IDP Metadata file from QuickLaunch:
   
8. The IDP Metadata file from QuickLaunch will contain a SAML endpoint URL in a format that is not supported by Grammarly. You need to perform additional steps in QuickLaunch to create a new SAML endpoint URL:
   1. Hover over the Apps section and click Create New App again.
   2. This time, under the Choose configuration type section, choose External link.
      
   3. In the Application URL field, enter the following URL:

      https://id.quicklaunch.io/samlsso?tenantDomain={Tenant_domain}&spEntityID=https://sso.grammarly.com/saml/metadata
      

      Note: {Tenant_domain} needs to be replaced with the appropriate value later.

      
   4. Click Save & Configure in the upper-right corner.
   5. Reach out to the QuickLaunch Support team at support@quicklaunchsso.com and share the name of this app to receive a custom SAML endpoint URL.

Finally, to enable SSO on the Grammarly side, please see step 2 of this article: Set up SAML single sign-on

If you encounter any issues, please look for a troubleshooting article on this page: Resolve Issues