Organization Settings and Member SSO Login

Configuration steps (using Alibaba Cloud IDaaS as an example)

1. Create a SAML application in IDaaS

   Sign in to the IDaaS instance management console, go to "Applications", click "Add application", choose the "Standard SAML 2.0" application template, enter an application name, and create.

2. Get IdP information from IDaaS and fill it into Real Translation Buddy

   On the IDaaS application's "Single Sign-On" page, find the "Application configuration" area at the bottom and copy the IdP information. In the Real Translation Buddy console, go to the "Settings" page, find the "SSO configuration" section, switch to the "SAML" tab and click "Edit". Enter a custom "SP Entity ID" and the following IdP information, then save:

   IDaaS application field	Real Translation Buddy field	Description
   IdP Entity ID	IdP Entity ID	The unique identifier of IDaaS in the application.
   IdP Sign-in URL	IdP ACS URL	The authentication endpoint members are redirected to for SSO sign-in.
   Certificate	IdP Certificate	Click "Copy certificate" to copy the full certificate content.

3. Copy SP information back to IDaaS

   After saving, the Real Translation Buddy SSO configuration section displays the auto-generated "SP ACS URL". In the IDaaS application's "Access > Single Sign-On" page, fill in the following parameters:

   Real Translation Buddy SP field	IDaaS field	Description
   SP Entity ID	Application Entity ID (SP Entity ID)	Enter the custom "SP Entity ID" set in Real Translation Buddy.
   SP ACS URL	Single sign-on URL (ACS URL)	Enter the SP ACS URL auto-generated by Real Translation Buddy.

4. Create accounts and authorize in IDaaS

   In the IDaaS instance management console, go to "Account management" and create IDaaS accounts for team members who need to use Real Translation Buddy. Then, in the SAML application's "Access > Application authorization" page, click "Add authorization" and select the accounts, groups, or organizational units that should sign in via SSO. To add more users later, repeat this step — no need to reconfigure SSO parameters.

5. Share the Member Login URL

   Copy the "Member Login URL" from the "Basic information" section and share it with the authorized members. They visit the URL and choose SSO sign-in to join the organization.

Other IdP integrations

If you use Microsoft Entra ID, Okta, Auth0, or another identity provider, the core flow is the same: obtain the IdP triplet (Entity ID, Sign-in URL, certificate) → fill it into Real Translation Buddy → copy the SP information generated by Real Translation Buddy back to your IdP. Refer to your IdP's documentation for specific field names and locations.

Parameter reference

SP information (Real Translation Buddy side):

IdP information (enterprise side, obtained from your IdP):

Prerequisites

• You have created a DingTalk enterprise.

• Target members have been added to the enterprise.

Configuration steps

1. Create a DingTalk in-house app and obtain credentials

   Sign in to the DingTalk developer console, go to "App Development > In-house Apps > DingTalk App", and click "Create application". Enter an application name and description, then save.

   On the application detail page, go to "Basic info > Credentials & basics" and record the Client ID and Client Secret (i.e. the app's AppKey and AppSecret). You will use them in the Real Translation Buddy console.

2. Configure the redirect URL and permissions

   On the application detail page, go to "Development > Security", and fill the following URL into "Redirect URL (callback domain)", then save:

   https://account.uac.aliyun.com/api/v1/auth/dingtalk/callback

   Then go to the application's "Permissions" page and enable Read personal contact information. This permission is used to identify the member's DingTalk account during sign-in.

3. Release the application

   Go to "Release > Version management and release" and create a new version to release.

4. Fill credentials into Real Translation Buddy

   In the Real Translation Buddy console, go to the "Settings" page, find the "SSO configuration" section, switch to the "DingTalk" tab, and fill in "Config name", "DingTalk AppKey" and "DingTalk AppSecret" (the Client ID / Client Secret from step 1), then save.

5. Share the Member Login URL

   Copy the "Member Login URL" from the "Basic information" section and share it with team members. They visit the URL and choose DingTalk sign-in to join the organization.

Parameter reference