Configuring SAML SSO for Datadog

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Datadog

Prerequisite

1. Log in to ADSelfService Plus as an administrator.
2. Navigate to  Configuration → Self-Service → Password Sync/Single Sign On → Add Application, and select Datadog from the applications displayed.
   Note: You can also find Datadog application that you need from the search bar located in the left pane or the alphabet wise navigation option in the right pane.
3. Click IdP details in the top-right corner of the screen.
4. In the pop-up screen that appears, click Download Metadata and save the XML file. We will need this file in a later step.

Datadog (Service Provider) configuration steps

1. Now, log in to your Datadog administrator account.
2. Click on your profile picture present at the bottom left corner.
3. Click Settings.
4. Click Go to organization settings and select the Configure SAML tab.
5. Click Enable and upload the metadata file you had saved in Step 4 of Prerequisite.

6. When you enable SAML, a single sign-on URL will be displayed. Note down the URL. This will serve as the SAML Redirect URL while configuring Datadog with ADSelfService Plus.

   

ADSelfService Plus (Identity Provider) configuration steps

1. Now, switch to ADSelfService Plus’ Datadog configuration page.
2. Enter the Application Name and Description.
3. In the Assign Policies field, select the policies for which SSO need to be enabled.
   Note:ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
4. Select Enable Single Sign-On.
5. Enter the Domain Name of your Datadog account. For example, if you use johndoe@thinktodaytech.com to log in to Datadog, then thinktodaytech.com is the domain name.
6. In the SAML Redirect URL field, enter the URL you had copied in Step 6 of Datadog configuration.
7. In the Name ID Format field, choose the format for the user login attribute value specific to the application.

Note: Use Unspecified as the default option if you are unsure about the format of the login attribute value used by the application

8. Click Add Application.

   Your users should now be able to sign in to Datadog through ADSelfService Plus.

Note: For Datadog, both IdP-initiated and SP-initiated flows are supported.