Add Grammarly to an identity provider

Requirements
- Identity provider account with access to the administrator console
- Grammarly Business or Grammarly for Education account with admin role

Instructions on adding Grammarly to different identity providers:

• Okta
• Google
• ClassLink
• Centrify
• Azure AD
• PingOne
• Auth0
• OneLogin
• ADFS
• CyberArk Identity
• Rippling
• QuickLaunch

If your identity provider is not on the list, you can still try to configure it for Grammarly by using the following parameters:

1. Single sign-on URL: https://sso.grammarly.com/saml/assertion
2. Audience URI/SP Entity ID/Issuer: https://sso.grammarly.com/saml/metadata
3. Name ID format: EmailAddress
4. Name ID / Application Username / Unique Identifier: Email
5. Required attributes/claims:
   • EmailAddress
   • FirstName
   • LastName
6. Optional attributes/claims:
   • GrammarlyRole
   • GrammarlyGroup
   • CommonName (instead of FirstName and LastName)
     

Note: The names of attributes/claims must follow the specified format. Alternative name spellings or FriendlyNames are not supported.

If present, the GrammarlyRole attribute assigns appropriate permission to the member. For more information about roles and permissions, see this article. The permitted GrammarlyRole values are:

• ADMIN
• ACCOUNT_MANAGER
• INSTITUTION_USER

If present, the GrammarlyGroupRoleGroupManager attribute assigns the appropriate permission to a team member. The value of the attribute should be the name of the group that the member is assigned to manage.

Note: The group manager permissions are available only to the Grammarly Business customers on the Enterprise Tier.

If present, the GrammarlyGroup attribute assigns the member to the corresponding group within Grammarly. For more information about groups, see this article.

Grammarly SSO supports alternative attribute and claim names to be compliant with standards such as InCommon. Below is a list of alternative attributes/claims that can be used:

• EmailAddress: mail, urn:oid:0.9.2342.19200300.100.1.3
• CommonName: commonName, cn, urn:oid:2.5.4.3
• FirstName: givenName, urn:oid:2.5.4.42
• LastName: surname, sn, urn:oid:2.5.4.4
  

After you have the Grammarly SAML app set up in your identity provider, please see this article for instructions on how to enable SSO for your account.