Note: The functionality described in this article is available only to Grammarly Enterprise customers. If you’re interested in enabling this feature, please contact your Customer Success Manager or the Grammarly Support team.
This guide provides the steps required to configure SCIM provisioning for Grammarly in OneLogin. For general information about SCIM provisioning, please refer to this article: Configure SCIM provisioning
Topics covered in this article:
- Features
- Requirements
- Step-by-Step Configuration Instructions
- Provisioning of Already Assigned Users
- Monitoring Deployment
- Resolve Issues
Features
The following provisioning features are supported in OneLogin:
- Create users in Grammarly
- Remove users in Grammarly when they no longer require access
- Keep user attributes synchronized between OneLogin and Grammarly
Requirements
- OneLogin account with access to the administrator console
- Grammarly Enterprise account with the admin role or a designated custom role
- Grammarly app configured in OneLogin
- SAML Single Sign-On (SSO) enabled in Grammarly
Step-by-Step Configuration Instructions
- Log in to your Grammarly account, go to the Provisioning page, and click Configure.
- Click the Activate SCIM button
- Generate a SCIM token by clicking the Create token link
- Copy the SCIM token for future use, click Got it, and close the window.
- Log in to the OneLogin admin’s console and navigate to the Apps → Company Apps → Grammarly app.
- Go to the Configuration tab. Enter the Grammarly SCIM token generated in step #1.
- Click Enable to connect to the Grammarly API.
- Navigate to the Provisioning tab.
- Select Enable provisioning for Grammarly.
- Choose the provisioning actions for which you want to require the administrator’s approval. If either Create user / Delete user / Update user is enabled (e.g., on the screenshot below), the selected actions have to be manually approved or ignored each time by the administrator in the OneLogin Users → Provisioning tab.
Leave the actions clear if you want OneLogin to make the provisioning changes automatically without requiring administrative approval.
Select one of the following actions (Delete, Suspend, or Do Nothing) on what happens with a user in Grammarly if the user’s account is deleted/suspended in OneLogin. - Click Save.
- Go to Apps → Company Apps → Grammarly → Parameters to confirm the mapping of Grammarly attributes to OneLogin attributes.
Select Configured by admin. Make sure the attributes are set as follows: - Add users to Grammarly OneLogin. With SSO enabled, these users will be provisioned automatically.
Go to Users → Users → Select a user → Applications. Assign the Grammarly application.
Provisioning of Already Assigned Users
If you already have Grammarly users, those users can be synchronized with the newly provisioned OneLogin users.
- Go to Apps → Company Apps → Grammarly.
- Go to the More Actions menu. Click Sync logins.
OneLogin will retrieve the list of active Grammarly users and automatically link those users based on the default username (email address).
Note: The Sync logins process overwrites the personal Grammarly passwords of the existing users with the passwords stored for those users in OneLogin.
Monitoring Deployment
Once you’ve finished provisioning, check the Apps → Company Apps → Grammarly → Users tab to review the provisioning state of the selected user.
If the provisioning row shows Failed for the user, click the row to view the reason for the failure. Click Retry to try again after fixing the issue.
Resolve Issues
- Users without Email, First Name, and Last Name defined in their OneLogin profiles cannot be imported to Grammarly as the new users.
- When users are deactivated in OneLogin, they will be deactivated in Grammarly. Users will not be able to log in to the application, but their data will remain available as “inactive users.” After 30 days, their accounts will be deleted completely.